Schneider Electric Pelco Sarix Professional up to 3.29 Password credentials management

Summaryinfo

A vulnerability, which was classified as critical, was found in Schneider Electric Pelco Sarix Professional up to 3.29. This affects an unknown function of the component Password Handler. Executing a manipulation can lead to credentials management. The identification of this vulnerability is CVE-2018-7782. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability classified as critical was found in Schneider Electric Pelco Sarix Professional up to 3.29 (SCADA Software). This vulnerability affects some unknown functionality of the component Password Handler. The manipulation with an unknown input leads to a credentials management vulnerability. The CWE definition for the vulnerability is CWE-255. As an impact it is known to affect confidentiality. CVE summarizes:

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text.

The bug was discovered 04/24/2018. The weakness was shared 07/03/2018 (Website). The advisory is shared for download at schneider-electric.com. This vulnerability was named CVE-2018-7782 since 03/08/2018. The exploitation appears to be easy. The attack can be initiated remotely. A single authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1552.

The vulnerability was handled as a non-public zero-day exploit for at least 70 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 3.29.69 eliminates this vulnerability.

The entries VDB-120303 and VDB-120302 are related to this item. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• SCADA Software

Vendor

• Schneider Electric

Name

• Pelco Sarix Professional

Version

• 3.0
• 3.1
• 3.2
• 3.3
• 3.4
• 3.5
• 3.6
• 3.7
• 3.8
• 3.9
• 3.10
• 3.11
• 3.12
• 3.13
• 3.14
• 3.15
• 3.16
• 3.17
• 3.18
• 3.19
• 3.20
• 3.21
• 3.22
• 3.23
• 3.24
• 3.25
• 3.26
• 3.27
• 3.28
• 3.29

License

• commercial

Website

• Vendor: https://www.schneider-electric.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion