CVE-2018-7828
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced...
CVE-2018-7828 is a high vulnerability (CVSS 8.8) in Pelco Sarix Enhanced And Spectra Enhanced, Pelco Sarix Enhanced 1st Generation And Spectra Enhanced Ptz, published May 22, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. No source names a fixed version.
- Severity
- 8.8 HighCVSS 3.0, NVD
- Exploit chance
- 0.57%EPSS, 47th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
- pelco sarix enhanced and spectra enhanced, pelco sarix enhanced 1st generation and spectra enhanced ptz
- schneider-electric d6220 firmware
- schneider-electric d6220l firmware
- schneider-electric d6230 firmware
- schneider-electric d6230l firmware
- schneider-electric ime119-1ei firmware
- schneider-electric ime119-1ep firmware
- schneider-electric ime119-1es firmware
- schneider-electric ime119-1i firmware
- schneider-electric ime119-1p firmware
- schneider-electric ime119-1s firmware
- schneider-electric ime119-1vi firmware
Show 48 moreShow less
- schneider-electric ime119-1vp firmware
- schneider-electric ime119-1vs firmware
- schneider-electric ime219-1ei firmware
- schneider-electric ime219-1ep firmware
- schneider-electric ime219-1es firmware
- schneider-electric ime219-1i firmware
- schneider-electric ime219-1p firmware
- schneider-electric ime219-1s firmware
- schneider-electric ime219-1vi firmware
- schneider-electric ime219-1vp firmware
- schneider-electric ime219-1vs firmware
- schneider-electric ime3122-1ei firmware
- schneider-electric ime3122-1ep firmware
- schneider-electric ime3122-1es firmware
- schneider-electric ime3122-1i firmware
- schneider-electric ime3122-1p firmware
- schneider-electric ime3122-1s firmware
- schneider-electric ime3122-1vi firmware
- schneider-electric ime3122-1vp firmware
- schneider-electric ime3122-1vs firmware
- schneider-electric ime3122-b1i firmware
- schneider-electric ime3122-b1p firmware
- schneider-electric ime3122-b1s firmware
- schneider-electric ime319-1ei firmware
- schneider-electric ime319-1ep firmware
- schneider-electric ime319-1es firmware
- schneider-electric ime319-1i firmware
- schneider-electric ime319-1p firmware
- schneider-electric ime319-1s firmware
- schneider-electric ime319-1vi firmware
- schneider-electric ime319-1vp firmware
- schneider-electric ime319-1vs firmware
- schneider-electric ime319-b1i firmware
- schneider-electric ime319-b1p firmware
- schneider-electric ime319-b1s firmware
- schneider-electric imes19-1ei firmware
- schneider-electric imes19-1ep firmware
- schneider-electric imes19-1es firmware
- schneider-electric imes19-1i firmware
- schneider-electric imes19-1p firmware
- schneider-electric imes19-1s firmware
- schneider-electric imes19-1vi firmware
- schneider-electric imes19-1vp firmware
- schneider-electric imes19-1vs firmware
- schneider-electric ixe11 firmware
- schneider-electric ixe21 firmware
- schneider-electric ixe31 firmware
- schneider-electric ixes1 firmware
What each source reports
NVD Score used
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.
- Record
CVE-2018-7828- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-352
- Updated
- 2026-11-02
CVE ListNo score
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.
- Record
CVE-2018-7828- Updated
- 2026-11-02
EUVDEUVD-2018-19540No score
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.
- Record
EUVD-2018-19540- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3r4p-64cj-6xrc
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced...
A Cross-Site Request Forgery (CSRF) vulnerability exists in the 1st Gen. Pelco Sarix Enhanced Camera and Spectra Enhanced PTZ Camera when an authenticated user clicks a specially crafted malicious link while logged into the camera.
- Record
GHSA-3r4p-64cj-6xrc- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-352
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.