Hard-coded credentials in Schneider Electric Pelco Sarix Professional
Priority MEDIUM 46CWE-798Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.
Summary
A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and gain administrator privileges because the use of hardcoded credentials.
Why it matters now
EPSS 0.02188 82nd percentileScored 2026-11-07
Fix Fixed Pelco Sarix Professional (Schneider Electric SE): 3.29.69
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Schneider Electric | Pelco Sarix Professional | before 3.29.69 | 3.29.69 | Patch available | CNA |
- Pelco Sarix Professional VendorSchneider Electric Affected before 3.29.69 Fixed in 3.29.69 Patch available CNA
CPE configurations NVD · 40
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:schneider-electric:mps110-1_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:mps110-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imps110-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imps110-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:ibps110-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:ibps110-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp1110-1_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp1110-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp1110-1e_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp1110-1e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
- cpe:2.3:o:schneider-electric:mps110-1_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:mps110-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imps110-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imps110-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:ibps110-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:ibps110-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp1110-1_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp1110-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp1110-1e_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp1110-1e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
Show 30 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:schneider-electric:imp1110-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp1110-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:ibp1110-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:ibp1110-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp219-1_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp219-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp219-1e_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp219-1e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp219-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp219-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:ibp219-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:ibp219-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp319-1_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp319-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp319-1e_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp319-1e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:ibp319-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:ibp319-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp519-1_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp519-1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp319-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp319-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp519-1e_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp519-1e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imp519-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imp519-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:ibp519-1er_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:ibp519-1er:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
| cpe:2.3:o:schneider-electric:imps110-1e_firmware:*:*:*:*:*:*:*:* | before 3.29.67 | Vulnerable | Schneider Electric |
| cpe:2.3:h:schneider-electric:imps110-1e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Schneider Electric |
- cpe:2.3:o:schneider-electric:imp1110-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp1110-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:ibp1110-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:ibp1110-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp219-1_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp219-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp219-1e_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp219-1e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp219-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp219-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:ibp219-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:ibp219-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp319-1_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp319-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp319-1e_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp319-1e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:ibp319-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:ibp319-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp519-1_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp519-1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp319-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp319-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp519-1e_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp519-1e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imp519-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imp519-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:ibp519-1er_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:ibp519-1er:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
- cpe:2.3:o:schneider-electric:imps110-1e_firmware:*:*:*:*:*:*:*:* Versions before 3.29.67 Vulnerable ·Schneider Electric
- cpe:2.3:h:schneider-electric:imps110-1e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Schneider Electric
Remediation
- Fix · CNA Pelco Sarix Professional (Schneider Electric SE) Fixed in 3.29.69
Timeline
- 2026-10-02 Threatist record created from CVE-2018-7229
- 2026-10-03 Alias added: GHSA-gh8q-9q7p-q94j
More Schneider Electric Ibp1110-1er Firmware vulnerabilities
- TI-2018-05247 Buffer overflow in Schneider Electric Pelco Sarix Professional CVSS 3.1CRITICAL 9.8
- TI-2018-05242 Improper input validation in Schneider Electric Pelco Sarix Professional CVSS 3.1CRITICAL 9.8
- TI-2018-05241 Improper input validation in Schneider Electric Pelco Sarix Professional CVSS 3.1CRITICAL 9.8
- TI-2018-05240 Improper input validation in Schneider Electric Pelco Sarix Professional CVSS 3.1CRITICAL 9.8
- TI-2018-05237 Improper authentication in Schneider Electric Pelco Sarix Professional CVSS 3.1CRITICAL 9.8
- TI-2018-05622 Memory corruption in Schneider Electric Pelco Sarix Professional V1 CVSS 3.0CRITICAL 9.8
Sources
- CVE-2018-7229 · CVE Program
- CVE-2018-7229 · NVD
- FIRST EPSS
- GHSA-gh8q-9q7p-q94j · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences