CVE-2018-7231

CRITICAL · CVSS 9.8 EPSS 2.06%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-03-09 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-7231

Severity

CRITICAL

CVSS

9.8

EPSS

2.06%

Original Filing — NVD Description

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'system.opkg.remove'.