Buffer overflow

2018-03-0923:29:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

84.1%

JSON

A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric’s Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code.

CPENameOperatorVersion
ibp1110-1er_firmwarelt3.29.67
ibp219-1er_firmwarelt3.29.67
ibp319-1er_firmwarelt3.29.67
ibp519-1er_firmwarelt3.29.67
ibps110-1er_firmwarelt3.29.67
imp1110-1_firmwarelt3.29.67
imp1110-1e_firmwarelt3.29.67
imp1110-1er_firmwarelt3.29.67
imp219-1_firmwarelt3.29.67
imp219-1e_firmwarelt3.29.67

Name	Operator	Version
ibp1110-1er_firmware	lt	3.29.67
ibp219-1er_firmware	lt	3.29.67
ibp319-1er_firmware	lt	3.29.67
ibp519-1er_firmware	lt	3.29.67
ibps110-1er_firmware	lt	3.29.67
imp1110-1_firmware	lt	3.29.67
imp1110-1e_firmware	lt	3.29.67
imp1110-1er_firmware	lt	3.29.67
imp219-1_firmware	lt	3.29.67
imp219-1e_firmware	lt	3.29.67