Schneider Electric d6220 Firmware vulnerabilities

6 CVEs affecting Schneider Electric d6220 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7829, published 2019-05-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-7826, published 2019-05-22. High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days. A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands.
CVE-2018-7825, published 2019-05-22. High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days. A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands.
CVE-2018-7829, published 2019-05-22. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary…
CVE-2018-7816, published 2019-05-22. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file.
CVE-2018-7827, published 2019-05-22. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. A Cross-Site Scripting (XSS) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which a remote attacker can execute arbitrary HTML and script code in a…
CVE-2018-7828, published 2019-05-22. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious…