Security Advisory

CVE-2018-7235

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-09 23:00:00

Last updated 2024-09-17 03:44:15

Assigner schneider

CVSS score not scored

State PUBLISHED

Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sd_file'

← Browse all CVEs View on cve.org ↗