Schneider Electric IMPS110-1 Firmware vulnerabilities

3 CVEs affecting Schneider Electric IMPS110-1 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-7782, published 2018-07-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-7780, published 2018-07-03. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program "set".
CVE-2018-7782, published 2018-07-03. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text.
CVE-2018-7781, published 2018-07-03. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear…