CVE Published: 09/03/2018 |
CVE Updated: 17/09/2024 |
CVE Year: 2018 Source: schneider |
Vendor: Schneider Electric SE |
Product: Pelco Sarix Professional Status : PUBLISHED
CVE-2018-7235 Description
A vulnerability exists in Schneider Electric\'s Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of \'system.download.sd_file\'