Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2018-7828: Schneider Electric camera firmware can be tricked into unwanted actions
CVE-2018-7828 · published 7 years ago
Summary
The firmware used in several Schneider Electric camera models can be fooled into performing actions that the user did not intend if a logged‑in user clicks a specially crafted link. This could let an attacker change camera settings or disrupt operation. Apply the latest firmware updates and train users to avoid clicking unknown links while logged into the device.
What to do
- Update schneider-electric imes19-1i_firmware to version 2.2.3.0 or later.
- Update schneider-electric imes19-1s_firmware to version 2.2.3.0 or later.
- Update schneider-electric imes19-1p_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime119-1i_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime119-1s_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime119-1p_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime219-1i_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime219-1s_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime219-1p_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-1i_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-1s_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-1p_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-b1i_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-b1s_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-b1p_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-1i_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-b1i_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-1s_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-b1s_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-1p_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-b1p_firmware to version 2.2.3.0 or later.
- Update schneider-electric imes19-1ei_firmware to version 2.2.3.0 or later.
- Update schneider-electric imes19-1es_firmware to version 2.2.3.0 or later.
- Update schneider-electric imes19-1ep_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime119-1ei_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime119-1es_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime119-1ep_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime219-1ei_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime219-1es_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime219-1ep_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-1ei_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-1es_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-1ep_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-1ei_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-1es_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-1ep_firmware to version 2.2.3.0 or later.
- Update schneider-electric imes19-1vi_firmware to version 2.2.3.0 or later.
- Update schneider-electric imes19-1vs_firmware to version 2.2.3.0 or later.
- Update schneider-electric imes19-1vp_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime119-1vi_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime119-1vs_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime119-1vp_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime219-1vi_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime219-1vs_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime219-1vp_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-1vi_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-1vs_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime319-1vp_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-1vi_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-1vs_firmware to version 2.2.3.0 or later.
- Update schneider-electric ime3122-1vp_firmware to version 2.2.3.0 or later.
- Update schneider-electric ixes1_firmware to version 2.2.3.0 or later.
- Update schneider-electric ixe11_firmware to version 2.2.3.0 or later.
- Update schneider-electric ixe21_firmware to version 2.2.3.0 or later.
- Update schneider-electric ixe31_firmware to version 2.2.3.0 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| schneider-electric | d6220_firmware |
>= 2.11 cpe:2.3:o:schneider-electric:d6220_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | d6220l_firmware |
>= 2.11 cpe:2.3:o:schneider-electric:d6220l_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | d6230_firmware |
>= 2.11 cpe:2.3:o:schneider-electric:d6230_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | d6230l_firmware |
>= 2.11 cpe:2.3:o:schneider-electric:d6230l_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | imes19-1i_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:imes19-1i_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | imes19-1s_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:imes19-1s_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | imes19-1p_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:imes19-1p_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime119-1i_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime119-1i_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime119-1s_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime119-1s_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime119-1p_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime119-1p_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime219-1i_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime219-1i_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime219-1s_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime219-1s_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime219-1p_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime219-1p_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime319-1i_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-1i_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime319-1s_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-1s_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime319-1p_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-1p_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime319-b1i_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-b1i_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime319-b1s_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-b1s_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime319-b1p_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-b1p_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-1i_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-1i_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-b1i_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-b1i_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-1s_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-1s_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-b1s_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-b1s_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-1p_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-1p_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-b1p_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-b1p_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | imes19-1ei_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:imes19-1ei_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | imes19-1es_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:imes19-1es_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | imes19-1ep_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:imes19-1ep_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime119-1ei_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime119-1ei_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime119-1es_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime119-1es_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime119-1ep_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime119-1ep_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime219-1ei_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime219-1ei_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime219-1es_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime219-1es_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime219-1ep_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime219-1ep_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime319-1ei_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-1ei_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime319-1es_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-1es_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime319-1ep_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-1ep_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-1ei_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-1ei_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-1es_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-1es_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-1ep_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-1ep_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | imes19-1vi_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:imes19-1vi_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | imes19-1vs_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:imes19-1vs_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | imes19-1vp_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:imes19-1vp_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime119-1vi_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime119-1vi_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime119-1vs_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime119-1vs_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime119-1vp_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime119-1vp_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime219-1vi_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime219-1vi_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime219-1vs_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime219-1vs_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime219-1vp_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime219-1vp_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime319-1vi_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-1vi_firmware:*:*:*:*:*:*:*:* |
Showing 50 of 59. Show the rest
| Vendor | Product | Affected versions |
|---|---|---|
| schneider-electric | ime319-1vs_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-1vs_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime319-1vp_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime319-1vp_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-1vi_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-1vi_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-1vs_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-1vs_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ime3122-1vp_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ime3122-1vp_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ixes1_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ixes1_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ixe11_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ixe11_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ixe21_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ixe21_firmware:*:*:*:*:*:*:*:* |
| schneider-electric | ixe31_firmware |
< 2.2.3.0 cpe:2.3:o:schneider-electric:ixe31_firmware:*:*:*:*:*:*:*:* |
Original advisory text
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious ...
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.
References
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-352Cross-Site Request Forgery (CSRF)
Timeline
Published22 May 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-7828 · NVD
Track software like this
Free during beta