CVE-2018-7827: Schneider Electric d6220 Firmware
Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.
A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a user’s browser session.
Affected products
- Schneider Electric d6220 Firmware: from 2.11
- Schneider Electric d6220l Firmware: from 2.11
- Schneider Electric d6230 Firmware: from 2.11
- Schneider Electric d6230l Firmware: from 2.11
- Schneider Electric IME119-1ei Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1ep Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1es Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1i Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1p Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1s Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1vi Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1vp Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1vs Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1ei Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1ep Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1es Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1i Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1p Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1s Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1vi Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1vp Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1vs Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME3122-1ei Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME3122-1ep Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME3122-1es Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- and 34 more
Published 2019-05-22. Last modified 2026-06-17.