vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2018-7237

CRITICAL
9.1
CVSS Score
Published: March 9, 2018 at 11:00 PM UTC
Updated: June 17, 2026 at 02:02 AM UTC
41 products affected across 1 vendorImp319-1 FirmwareImp219-1e FirmwareImp219-1er Firmware

Using Pelco Sarix Professional by Schneider Electric SE?

Get instant alerts when new vulnerabilities affect Pelco Sarix Professional - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
CRITICAL9.1
Exploit prediction
EPSS 2%

Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker to delete arbitrary system file due to lack of validation of the /login/bin/set_param to the file name with the value of 'system.delete.sd_file'

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ibp1110-1er Firmware· Schneider Electric
95%
v < 3.29.67
Affected range stops below 3.29.67, so it looks safe — our inference, not a vendor statement
schneider-electric-ibp1110-1er (same device)
Ibp219-1er Firmware· Schneider Electric
95%
v < 3.29.67
Affected range stops below 3.29.67, so it looks safe — our inference, not a vendor statement
schneider-electric-ibp219-1er (same device)
Ibp319-1er Firmware· Schneider Electric
95%
v < 3.29.67
Affected range stops below 3.29.67, so it looks safe — our inference, not a vendor statement
schneider-electric-ibp319-1er (same device)
Ibp519-1er Firmware· Schneider Electric
95%
v < 3.29.67
Affected range stops below 3.29.67, so it looks safe — our inference, not a vendor statement
schneider-electric-ibp519-1er (same device)
IBPS110 1ER Firmware· Schneider Electric
95%
v < 3.29.67
Affected range stops below 3.29.67, so it looks safe — our inference, not a vendor statement
schneider-electric-ibps110-1er (same device)
Imp1110-1 Firmware· Schneider Electric
95%
v < 3.29.67
Affected range stops below 3.29.67, so it looks safe — our inference, not a vendor statement
schneider-electric-imp1110-1 (same device)
Imp1110-1e Firmware· Schneider Electric
95%
v < 3.29.67
Affected range stops below 3.29.67, so it looks safe — our inference, not a vendor statement
schneider-electric-imp1110-1e (same device)
Imp1110-1er Firmware· Schneider Electric
95%
v < 3.29.67
Affected range stops below 3.29.67, so it looks safe — our inference, not a vendor statement
schneider-electric-imp1110-1er (same device)
Imp219-1 Firmware· Schneider Electric
95%
v < 3.29.67
Affected range stops below 3.29.67, so it looks safe — our inference, not a vendor statement
schneider-electric-imp219-1 (same device)
Imp219-1e Firmware· Schneider Electric
95%
v < 3.29.67
Affected range stops below 3.29.67, so it looks safe — our inference, not a vendor statement
schneider-electric-imp219-1e (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
https://www.schneider-electric.com/en/download/document/SEVD-2018-058-01/

CVSS

9.1CRITICAL[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card