CVE-2018-7782: High severity Schneider-electric Imps110-1 Firmware vulnerability
Published Jul 3, 2018
·Updated
In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text.
Affected Software
80 affected components
Schneider-electric Imps110-1 Firmware<3.29.69
Schneider-electric Imps110-1
Schneider-electric Imps110-1e Firmware<3.29.69
Schneider-electric Imps110-1e
Schneider-electric Imps110-1er Firmware<3.29.69
Schneider-electric Imps110-1er
Schneider-electric Ibps110-1er Firmware<3.29.69
Schneider-electric Ibps110-1er
Schneider-electric Imp1110-1 Firmware<3.29.69
Schneider-electric Imp1110-1
Schneider-electric Imp1110-1e Firmware<3.29.69
Schneider-electric Imp1110-1e
Schneider-electric Imp1110-1er Firmware<3.29.69
Schneider-electric Imp1110-1er
Schneider-electric Ibp1110-1er Firmware<3.29.69
Schneider-electric Ibp1110-1er
Schneider-electric Imp219-1 Firmware<3.29.69
Schneider-electric Imp219-1
Schneider-electric Imp219-1e Firmware<3.29.69
Schneider-electric Imp219-1e
Schneider-electric Imp219-1er Firmware<3.29.69
Schneider-electric Imp219-1er
Schneider-electric Ibp219-1er Firmware<3.29.69
Schneider-electric Ibp219-1er
Schneider-electric Imp319-1 Firmware<3.29.69
Schneider-electric Imp319-1
Schneider-electric Imp319-1e Firmware<3.29.69
Schneider-electric Imp319-1e
Schneider-electric Imp319-1er Firmware<3.29.69
Schneider-electric Imp319-1er
Schneider-electric Ibp319-1er Firmware<3.29.69
Schneider-electric Ibp319-1er
Schneider-electric Imp519-1 Firmware<3.29.69
Schneider-electric Imp519-1
Schneider-electric Imp519-1e Firmware<3.29.69
Schneider-electric Imp519-1e
Schneider-electric Imp519-1er Firmware<3.29.69
Schneider-electric Imp519-1er
Schneider-electric Ibp519-1er Firmware<3.29.69
Schneider-electric Ibp519-1er
All of the following
Schneider-electric Imps110-1 Firmware<3.29.69
Schneider-electric Imps110-1
All of the following
Schneider-electric Imps110-1e Firmware<3.29.69
Schneider-electric Imps110-1e
All of the following
Schneider-electric Imps110-1er Firmware<3.29.69
Schneider-electric Imps110-1er
All of the following
Schneider-electric Ibps110-1er Firmware<3.29.69
Schneider-electric Ibps110-1er
All of the following
Schneider-electric Imp1110-1 Firmware<3.29.69
Schneider-electric Imp1110-1
All of the following
Schneider-electric Imp1110-1e Firmware<3.29.69
Schneider-electric Imp1110-1e
All of the following
Schneider-electric Imp1110-1er Firmware<3.29.69
Schneider-electric Imp1110-1er
All of the following
Schneider-electric Ibp1110-1er Firmware<3.29.69
Schneider-electric Ibp1110-1er
All of the following
Schneider-electric Imp219-1 Firmware<3.29.69
Schneider-electric Imp219-1
All of the following
Schneider-electric Imp219-1e Firmware<3.29.69
Schneider-electric Imp219-1e
All of the following
Schneider-electric Imp219-1er Firmware<3.29.69
Schneider-electric Imp219-1er
All of the following
Schneider-electric Ibp219-1er Firmware<3.29.69
Schneider-electric Ibp219-1er
All of the following
Schneider-electric Imp319-1 Firmware<3.29.69
Schneider-electric Imp319-1
All of the following
Schneider-electric Imp319-1e Firmware<3.29.69
Schneider-electric Imp319-1e
All of the following
Schneider-electric Imp319-1er Firmware<3.29.69
Schneider-electric Imp319-1er
All of the following
Schneider-electric Ibp319-1er Firmware<3.29.69
Schneider-electric Ibp319-1er
All of the following
Schneider-electric Imp519-1 Firmware<3.29.69
Schneider-electric Imp519-1
All of the following
Schneider-electric Imp519-1e Firmware<3.29.69
Schneider-electric Imp519-1e
All of the following
Schneider-electric Imp519-1er Firmware<3.29.69
Schneider-electric Imp519-1er
All of the following
Schneider-electric Ibp519-1er Firmware<3.29.69
Schneider-electric Ibp519-1er
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Schneider Electric Pelco Sarix Professional 1st generation camerasto a version that resolves this vulnerability.Fixed in 3.29.69
Event History
Jul 3, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-7782?
CVE-2018-7782 is considered a moderate severity vulnerability as it allows authenticated users to view passwords in clear text.
2
How do I fix CVE-2018-7782?
To fix CVE-2018-7782, update your Schneider Electric Pelco Sarix Professional 1st generation camera firmware to version 3.29.69 or later.
3
What products are affected by CVE-2018-7782?
CVE-2018-7782 affects Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions before 3.29.69.
4
Can unprivileged users exploit CVE-2018-7782?
No, CVE-2018-7782 requires authenticated users to exploit the vulnerability and view passwords in clear text.
5
Is there a known exploit for CVE-2018-7782?
There has been no public disclosure of an active exploit for CVE-2018-7782, but it poses a risk if exploited.