Schneider Electric IMP219-1e Firmware vulnerabilities

15 CVEs affecting Schneider Electric IMP219-1e Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7782, published 2018-07-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-7238, published 2018-03-09. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote…
CVE-2018-7229, published 2018-03-09. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and…
CVE-2018-7228, published 2018-03-09. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and…
CVE-2018-7233, published 2018-03-09. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta…
CVE-2018-7232, published 2018-03-09. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta…
CVE-2018-7231, published 2018-03-09. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta…
CVE-2018-7237, published 2018-03-09. Critical severity, CVSS 9.1. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker to delete arbitrary system file due to lack of…
CVE-2018-7235, published 2018-03-09. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the…
CVE-2018-7230, published 2018-03-09. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67.
CVE-2018-7236, published 2018-03-09. High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH service due to lack of authentication for /login/bin/set_param…

Latest

CVE-2018-7782, published 2018-07-03. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text.
CVE-2018-7781, published 2018-07-03. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear…
CVE-2018-7780, published 2018-07-03. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set".
CVE-2018-7234, published 2018-03-09. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of SSL…