CVE:CVE-2018-7230
CNNVD:CNNVD-201803-047
Schneider Electric Pelco Sarix Professional是法国施耐德电气（Schneider Electric）公司的一款视频监控设备。Web interface是其中的一个Web管理界面。
使用3.29.67之前版本固件的Schneider Electric Pelco Sarix Professional中的Web interface组件的import.cgi文件存在XNL外部实体注入漏洞。攻击者可利用该漏洞可能获取信息。
solution:Upgrade schneider-electric mps110-1_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imps110-1er_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric ibps110-1er_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp1110-1_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp1110-1e_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp1110-1er_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric ibp1110-1er_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp219-1_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp219-1e_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp219-1er_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric ibp219-1er_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp319-1_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp319-1e_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric ibp319-1er_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp519-1_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp319-1er_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp519-1e_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imp519-1er_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric ibp519-1er_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67); Upgrade schneider-electric imps110-1e_firmware to a higher version than 3.29.67,and avoid the version (,3.29.67)