CVE-2018-7828: Schneider Electric d6220 Firmware
High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.
Affected products
- Schneider Electric d6220 Firmware: from 2.11
- Schneider Electric d6220l Firmware: from 2.11
- Schneider Electric d6230 Firmware: from 2.11
- Schneider Electric d6230l Firmware: from 2.11
- Schneider Electric IME119-1ei Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1ep Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1es Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1i Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1p Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1s Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1vi Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1vp Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME119-1vs Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1ei Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1ep Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1es Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1i Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1p Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1s Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1vi Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1vp Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME219-1vs Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME3122-1ei Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME3122-1ep Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- Schneider Electric IME3122-1es Firmware: before 2.2.3.0 (fixed in 2.2.3.0)
- and 34 more
Published 2019-05-22. Last modified 2026-06-17.