CVE-2018-7781: Schneider Electric IBP1110-1er Firmware

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.

Affected products

• Schneider Electric IBP1110-1er Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IBP219-1er Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IBP319-1er Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IBP519-1er Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IBPS110-1er Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP1110-1 Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP1110-1e Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP1110-1er Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP219-1 Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP219-1e Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP219-1er Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP319-1 Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP319-1e Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP319-1er Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP519-1 Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP519-1e Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMP519-1er Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMPS110-1 Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMPS110-1e Firmware: before 3.29.69 (fixed in 3.29.69)
• Schneider Electric IMPS110-1er Firmware: before 3.29.69 (fixed in 3.29.69)

Published 2018-07-03. Last modified 2026-06-17.