CVE-2018-7828

A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced...

8.8 High

CVE-2018-7828 is a high vulnerability (CVSS 8.8) in Pelco Sarix Enhanced And Spectra Enhanced, Pelco Sarix Enhanced 1st Generation And Spectra Enhanced Ptz, published May 22, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. No source names a fixed version.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.57%Up 0.2 points since Apr 14, 2021

What each source reports

NVD Score used 8.8

Record: CVE-2018-7828
CVSS 3.0: 8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-352
Updated: 2026-11-02

CVE List No score

Record: CVE-2018-7828
Updated: 2026-11-02

EUVDEUVD-2018-19540 No score

Record: EUVD-2018-19540
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3r4p-64cj-6xrc 8.8

A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced...

Record: GHSA-3r4p-64cj-6xrc
CVSS 3.0: 8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-352
Updated: 2026-11-02

Affected products

Show 48 moreShow less

History

History
When	Changed	Sources
2026-11-03	aliases, products	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD