CVE-2018-7825
A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced...
A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands.
- Record
CVE-2018-7825- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-77
- Updated
- 2026-11-02
CVE List No score
A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands.
- Record
CVE-2018-7825- Updated
- 2026-11-02
EUVDEUVD-2018-19537 No score
A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands.
- Record
EUVD-2018-19537- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j2hw-h5px-95rv
A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced...
A Command Injection vulnerability exists in the web-based GUI of the 1st Gen PelcoSarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands.
- Record
GHSA-j2hw-h5px-95rv- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-77
- Updated
- 2026-11-02
Affected products
- pelco sarix enhanced and spectra enhanced, pelco sarix enhanced 1st generation and spectra enhanced ptz
- schneider-electric d6220 firmware
- schneider-electric d6220l firmware
- schneider-electric d6230 firmware
- schneider-electric d6230l firmware
- schneider-electric ime119-1ei firmware
- schneider-electric ime119-1ep firmware
- schneider-electric ime119-1es firmware
- schneider-electric ime119-1i firmware
- schneider-electric ime119-1p firmware
- schneider-electric ime119-1s firmware
- schneider-electric ime119-1vi firmware
Show 48 moreShow less
- schneider-electric ime119-1vp firmware
- schneider-electric ime119-1vs firmware
- schneider-electric ime219-1ei firmware
- schneider-electric ime219-1ep firmware
- schneider-electric ime219-1es firmware
- schneider-electric ime219-1i firmware
- schneider-electric ime219-1p firmware
- schneider-electric ime219-1s firmware
- schneider-electric ime219-1vi firmware
- schneider-electric ime219-1vp firmware
- schneider-electric ime219-1vs firmware
- schneider-electric ime3122-1ei firmware
- schneider-electric ime3122-1ep firmware
- schneider-electric ime3122-1es firmware
- schneider-electric ime3122-1i firmware
- schneider-electric ime3122-1p firmware
- schneider-electric ime3122-1s firmware
- schneider-electric ime3122-1vi firmware
- schneider-electric ime3122-1vp firmware
- schneider-electric ime3122-1vs firmware
- schneider-electric ime3122-b1i firmware
- schneider-electric ime3122-b1p firmware
- schneider-electric ime3122-b1s firmware
- schneider-electric ime319-1ei firmware
- schneider-electric ime319-1ep firmware
- schneider-electric ime319-1es firmware
- schneider-electric ime319-1i firmware
- schneider-electric ime319-1p firmware
- schneider-electric ime319-1s firmware
- schneider-electric ime319-1vi firmware
- schneider-electric ime319-1vp firmware
- schneider-electric ime319-1vs firmware
- schneider-electric ime319-b1i firmware
- schneider-electric ime319-b1p firmware
- schneider-electric ime319-b1s firmware
- schneider-electric imes19-1ei firmware
- schneider-electric imes19-1ep firmware
- schneider-electric imes19-1es firmware
- schneider-electric imes19-1i firmware
- schneider-electric imes19-1p firmware
- schneider-electric imes19-1s firmware
- schneider-electric imes19-1vi firmware
- schneider-electric imes19-1vp firmware
- schneider-electric imes19-1vs firmware
- schneider-electric ixe11 firmware
- schneider-electric ixe21 firmware
- schneider-electric ixe31 firmware
- schneider-electric ixes1 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-7825 is a high vulnerability (CVSS 8.8) in Pelco Sarix Enhanced And Spectra Enhanced, Pelco Sarix Enhanced 1st Generation And Spectra Enhanced Ptz, published May 22, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.21%, the 82nd percentile. No source names a fixed version.