Schneider Electric Pelco Sarix Professional CVE-2018-7227 Information Disclosure Vulnerability

Bugtraq ID:	105842
Class:	Design Error
CVE:	CVE-2018-7227
Remote:	Yes
Local:	No
Published:	Sep 03 2018 12:00AM
Updated:	Sep 03 2018 12:00AM
Credit:	Deng Yongkai of NSFOCUS Security Team
Vulnerable:	Schneider-Electric Pelco Sarix Professional 03.29.65 Schneider-Electric Pelco Sarix Professional 03.29.63 Schneider-Electric Pelco Sarix Professional 03.29.59 Schneider-Electric Pelco Sarix Professional 03.29.51
Not Vulnerable:	Schneider-Electric Pelco Sarix Professional 03.29.67

Schneider Electric Pelco Sarix Professional CVE-2018-7227 Information Disclosure Vulnerability

Schneider Electric Pelco Sarix Professional is prone to a information-disclosure vulnerability.

An attacker can exploit this issue to obtain potentially sensitive information. Information obtained may aid in further attacks.

Versions prior to Schneider Electric Pelco Sarix Professional 3.29.67 are vulnerable.

Schneider Electric Pelco Sarix Professional CVE-2018-7227 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Schneider Electric Pelco Sarix Professional CVE-2018-7227 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Schneider Electric Pelco Sarix Professional CVE-2018-7227 Information Disclosure Vulnerability

References:

• Schneider Electric HomePage (Schneider Electric)
  
• Security Notification �?? Pelco Sarix Pr ofessional V 1. 2 (schneider-electric)