Improper authentication in Schneider Electric Pelco Sarix Professional
Priority LOW 26CWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker.
Why it matters now
EPSS 0.01202 68th percentileScored 2026-11-07
Fix Fixed Pelco Sarix Professional (Schneider Electric SE): 3.29.67
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Schneider Electric | Pelco Sarix Professional | before 3.29.67 | 3.29.67 | Patch available | CNA |
- Pelco Sarix Professional VendorSchneider Electric Affected before 3.29.67 Fixed in 3.29.67 Patch available CNA
CPE configurations NVD · 40
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:schneider-electric:mps110-1_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:mps110-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imps110-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imps110-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:ibps110-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:ibps110-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp1110-1_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp1110-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp1110-1e_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp1110-1e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
- cpe:2.3:o:schneider-electric:mps110-1_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:mps110-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imps110-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imps110-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:ibps110-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:ibps110-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp1110-1_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp1110-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp1110-1e_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp1110-1e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
Show 30 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:schneider-electric:imp1110-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp1110-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:ibp1110-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:ibp1110-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp219-1_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp219-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp219-1e_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp219-1e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp219-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp219-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:ibp219-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:ibp219-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp319-1_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp319-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp319-1e_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp319-1e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:ibp319-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:ibp319-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp519-1_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp519-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp319-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp319-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp519-1e_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp519-1e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp519-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp519-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:ibp519-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:ibp519-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imps110-1e_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imps110-1e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
- cpe:2.3:o:schneider-electric:imp1110-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp1110-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:ibp1110-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:ibp1110-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp219-1_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp219-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp219-1e_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp219-1e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp219-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp219-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:ibp219-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:ibp219-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp319-1_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp319-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp319-1e_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp319-1e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:ibp319-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:ibp319-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp519-1_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp519-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp319-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp319-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp519-1e_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp519-1e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp519-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp519-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:ibp519-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:ibp519-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imps110-1e_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imps110-1e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
Remediation
- Fix · CNA Pelco Sarix Professional (Schneider Electric SE) Fixed in 3.29.67
Timeline
- 2026-10-02 Threatist record created from CVE-2018-7227
- 2026-10-03 Alias added: GHSA-4j39-xf83-xp5q
More Schneider Electric Ibp1110-1er Firmware vulnerabilities
- TI-2018-05247 Buffer overflow in Schneider Electric Pelco Sarix Professional CVSS 3.1CRITICAL 9.8
- TI-2018-05242 Improper input validation in Schneider Electric Pelco Sarix Professional CVSS 3.1CRITICAL 9.8
- TI-2018-05241 Improper input validation in Schneider Electric Pelco Sarix Professional CVSS 3.1CRITICAL 9.8
- TI-2018-05240 Improper input validation in Schneider Electric Pelco Sarix Professional CVSS 3.1CRITICAL 9.8
- TI-2018-05238 Hard-coded credentials in Schneider Electric Pelco Sarix Professional CVSS 3.1CRITICAL 9.8
- TI-2018-05237 Improper authentication in Schneider Electric Pelco Sarix Professional CVSS 3.1CRITICAL 9.8
Sources
- CVE-2018-7227 · CVE Program
- CVE-2018-7227 · NVD
- FIRST EPSS
- GHSA-4j39-xf83-xp5q · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences