Schneider Electric Pelco Sarix Professional CVE-2018-7229 Authentication Bypass Vulnerability

Bugtraq ID:	103460
Class:	Design Error
CVE:	CVE-2018-7229
Remote:	Yes
Local:	No
Published:	Feb 27 2018 12:00AM
Updated:	Feb 27 2018 12:00AM
Credit:	Deng Yongkai of NSFOCUS Security Team.
Vulnerable:	Schneider-Electric Pelco Sarix Professional 03.29.65 Schneider-Electric Pelco Sarix Professional 03.29.63 Schneider-Electric Pelco Sarix Professional 03.29.59 Schneider-Electric Pelco Sarix Professional 03.29.51
Not Vulnerable:	Schneider-Electric Pelco Sarix Professional 03.29.67

Schneider Electric Pelco Sarix Professional CVE-2018-7229 Authentication Bypass Vulnerability

Schneider Pelco Sarix Professional is prone to an authentication-bypass vulnerability.

Attackers can exploit this issue to bypass the authentication mechanism and gain administrative privileges on the affected device.

Versions prior toSchneider Electric Pelco Sarix Professional 03.29.67 are vulnerable.

Schneider Electric Pelco Sarix Professional CVE-2018-7229 Authentication Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Schneider Electric Pelco Sarix Professional CVE-2018-7229 Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Schneider Electric Pelco Sarix Professional CVE-2018-7229 Authentication Bypass Vulnerability

References:

• Schneider Electric Homepage (Schneider Electric)
  
• Security Notification - Pelco Sarix Professional (Schneider Electric)