8.8high
CVE-2018-7829
An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen.
Published 7 y ago · modified 4 mo ago · JSON
CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.7%
percentile 77%
Public exploits
0
none known
Summary
An Improper Neutralization of Special Elements in Query vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera which allows an attacker to execute arbitrary system commands.
Exploit prediction (EPSS)
1.69% probability of exploitation in the next 30 days, higher than 77% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 8.8 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.0 | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Affected products
- n/a Pelco Sarix Enhanced and Spectra Enhanced, Pelco Sarix Enhanced 1st generation and Spectra Enhanced PTZ
Classification
- Weakness
- CWE-943 Improper Neutralization of Special Elements in Data Query Logic
References
- schneider-electric.com /en/download/document/SEVD-2019-045-03/ · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2018-7829
- NVD: CVE-2018-7829
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.