CVE-2018-7782

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-522

Affected software

Vendor	Product	Versions
Schneider Electric SE	Pelco Sarix Professional V1	Pelco Sarix Pro 1 st generation with firmware versions prior to 3.29.69

References

https://www.schneider-electric.com/en/download/document/SEVD-2018-114-01/Vendor Advisory
https://www.schneider-electric.com/en/download/document/SEVD-2018-114-01/Vendor Advisory

Timeline

Published: Jul 3, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-77837.5Schneider Electric SoMachine Basic prior to v1.6 SP1 suffers from an XML External Entity (XXE) vulnerability using the DTD parameter entitie CVE-2018-77849.8In Schneider Electric U.motion Builder software versions prior to v1.3.4, this exploit occurs when the submitted data of an input string is CVE-2018-77859.8In Schneider Electric U.motion Builder software versions prior to v1.3.4, a remote command injection allows authentication bypass.CVE-2018-77866.1In Schneider Electric U.motion Builder software versions prior to v1.3.4, a cross site scripting (XSS) vulnerability exists which could allo CVE-2018-77875.3In Schneider Electric U.motion Builder software versions prior to v1.3.4, this vulnerability is due to improper validation of input of conte CVE-2018-77886.5A CWE-255 Credentials Management vulnerability exists in Modicon Quantum with firmware versions prior to V2.40. which could cause a Denial O CVE-2018-77897.5An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, a CVE-2018-77909.8An Information Management Error vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to fir CVE-2018-77919.8A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all version CVE-2018-77927.5A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all references, all version CVE-2018-77938.7A Credential Management vulnerability exists in FoxView HMI SCADA (All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS CVE-2018-77947.5A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon