BDU:2019-00897

Vulnerability from fstec - Published: 14.02.2019
VLAI Severity ?
Title
Уязвимость WEB-интерфейса микропрограммного обеспечения камер серии Pelco Sarix Enhanced и Spectra Enhanced, позволяющая нарушителю выполнить произвольный JavaScript-код в браузере пользователя
Description
Уязвимость WEB-интерфейса микропрограммного обеспечения камер серии Pelco Sarix Enhanced и Spectra Enhanced связана с недостаточной защитой структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный JavaScript-код в браузере пользователя
Severity ?
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vendor
Schneider Electric
Software Name
Indoor Cameras IME3122-1P, Indoor Cameras IME3122-B1S, Indoor Cameras IME119-1I, Indoor Cameras IME119-1P, Indoor Cameras IME119-1S, Indoor Cameras IME219-1I, Indoor Cameras IME219-1P, Indoor Cameras IME219-1S, Indoor Cameras IME3122-1I, Indoor Cameras IME3122-1S, Indoor Cameras IME3122-B1I, Indoor Cameras IME3122-B1P, Indoor Cameras IME319-1I, Indoor Cameras IME319-1P, Indoor Cameras IME319-1S, Indoor Cameras IME319-B1I, Indoor Cameras IME319-B1P, Indoor Cameras IME319-B1S, Indoor Cameras IMES19-1I, Indoor Cameras IMES19-1P, Indoor Cameras IMES19-1S, Environmental Cameras Mini Domes IME119-1EI, Environmental Cameras Mini Domes IME119-1EP, Environmental Cameras Mini Domes IME119-1ES, Environmental Cameras Mini Domes IME219-1EI, Environmental Cameras Mini Domes IME219-1EP, Environmental Cameras Mini Domes IME219-1ES, Environmental Cameras Mini Domes IME3122-1EI, Environmental Cameras Mini Domes IME3122-1EP, Environmental Cameras Mini Domes IME3122-1ES, Environmental Cameras Mini Domes IME319-1EI, Environmental Cameras Mini Domes IME319-1EP, Environmental Cameras Mini Domes IME319-1ES, Environmental Cameras Mini Domes IMES19-1EI, Environmental Cameras Mini Domes IMES19-1EP, Environmental Cameras Mini Domes IMES19-1ES, Vandal Resistant Mini Domes IME119-1VI, Vandal Resistant Mini Domes IME119-1VP, Vandal Resistant Mini Domes IME119-1VS, Vandal Resistant Mini Domes IME219-1VI, Vandal Resistant Mini Domes IME219-1VP, Vandal Resistant Mini Domes IME219-1VS, Vandal Resistant Mini Domes IME3122-1VI, Vandal Resistant Mini Domes IME3122-1VP, Vandal Resistant Mini Domes IME3122-1VS, Vandal Resistant Mini Domes IME319-1VI, Vandal Resistant Mini Domes IME319-1VP, Vandal Resistant Mini Domes IME319-1VS, Vandal Resistant Mini Domes IMES19-1VI, Vandal Resistant Mini Domes IMES19-1VP, Vandal Resistant Mini Domes IMES19-1VS, Box Cameras IXE11, Box Cameras IXE21, Box Cameras IXE31, Box Cameras IXES1, Spectra Enhanced PTZ D6220, Spectra Enhanced PTZ D6220L, Spectra Enhanced PTZ D6230, Spectra Enhanced PTZ D6230L
Software Version
до 2.2.3.0 (Indoor Cameras IME3122-1P), до 2.2.3.0 (Indoor Cameras IME3122-B1S), до 2.2.3.0 (Indoor Cameras IME119-1I), до 2.2.3.0 (Indoor Cameras IME119-1P), до 2.2.3.0 (Indoor Cameras IME119-1S), до 2.2.3.0 (Indoor Cameras IME219-1I), до 2.2.3.0 (Indoor Cameras IME219-1P), до 2.2.3.0 (Indoor Cameras IME219-1S), до 2.2.3.0 (Indoor Cameras IME3122-1I), до 2.2.3.0 (Indoor Cameras IME3122-1S), до 2.2.3.0 (Indoor Cameras IME3122-B1I), до 2.2.3.0 (Indoor Cameras IME3122-B1P), до 2.2.3.0 (Indoor Cameras IME319-1I), до 2.2.3.0 (Indoor Cameras IME319-1P), до 2.2.3.0 (Indoor Cameras IME319-1S), до 2.2.3.0 (Indoor Cameras IME319-B1I), до 2.2.3.0 (Indoor Cameras IME319-B1P), до 2.2.3.0 (Indoor Cameras IME319-B1S), до 2.2.3.0 (Indoor Cameras IMES19-1I), до 2.2.3.0 (Indoor Cameras IMES19-1P), до 2.2.3.0 (Indoor Cameras IMES19-1S), до 2.2.3.0 (Environmental Cameras Mini Domes IME119-1EI), до 2.2.3.0 (Environmental Cameras Mini Domes IME119-1EP), до 2.2.3.0 (Environmental Cameras Mini Domes IME119-1ES), до 2.2.3.0 (Environmental Cameras Mini Domes IME219-1EI), до 2.2.3.0 (Environmental Cameras Mini Domes IME219-1EP), до 2.2.3.0 (Environmental Cameras Mini Domes IME219-1ES), до 2.2.3.0 (Environmental Cameras Mini Domes IME3122-1EI), до 2.2.3.0 (Environmental Cameras Mini Domes IME3122-1EP), до 2.2.3.0 (Environmental Cameras Mini Domes IME3122-1ES), до 2.2.3.0 (Environmental Cameras Mini Domes IME319-1EI), до 2.2.3.0 (Environmental Cameras Mini Domes IME319-1EP), до 2.2.3.0 (Environmental Cameras Mini Domes IME319-1ES), до 2.2.3.0 (Environmental Cameras Mini Domes IMES19-1EI), до 2.2.3.0 (Environmental Cameras Mini Domes IMES19-1EP), до 2.2.3.0 (Environmental Cameras Mini Domes IMES19-1ES), до 2.2.3.0 (Vandal Resistant Mini Domes IME119-1VI), до 2.2.3.0 (Vandal Resistant Mini Domes IME119-1VP), до 2.2.3.0 (Vandal Resistant Mini Domes IME119-1VS), до 2.2.3.0 (Vandal Resistant Mini Domes IME219-1VI), до 2.2.3.0 (Vandal Resistant Mini Domes IME219-1VP), до 2.2.3.0 (Vandal Resistant Mini Domes IME219-1VS), до 2.2.3.0 (Vandal Resistant Mini Domes IME3122-1VI), до 2.2.3.0 (Vandal Resistant Mini Domes IME3122-1VP), до 2.2.3.0 (Vandal Resistant Mini Domes IME3122-1VS), до 2.2.3.0 (Vandal Resistant Mini Domes IME319-1VI), до 2.2.3.0 (Vandal Resistant Mini Domes IME319-1VP), до 2.2.3.0 (Vandal Resistant Mini Domes IME319-1VS), до 2.2.3.0 (Vandal Resistant Mini Domes IMES19-1VI), до 2.2.3.0 (Vandal Resistant Mini Domes IMES19-1VP), до 2.2.3.0 (Vandal Resistant Mini Domes IMES19-1VS), до 2.2.3.0 (Box Cameras IXE11), до 2.2.3.0 (Box Cameras IXE21), до 2.2.3.0 (Box Cameras IXE31), до 2.2.3.0 (Box Cameras IXES1), до 2.11 (Spectra Enhanced PTZ D6220), до 2.11 (Spectra Enhanced PTZ D6220L), до 2.11 (Spectra Enhanced PTZ D6230), до 2.11 (Spectra Enhanced PTZ D6230L)
Possible Mitigations
Обновление программного обеспечения: Для Environmental Cameras Mini Domes (IMES19-1EI, IMES19-1ES, IMES19-1EP, IME119-1EI, IME119-1ES, IME119-1EP, IME219-1EI, IME219-1ES, IME219-1EP, IME319-1EI, IME319-1ES, IME319-1EP, IME3122-1EI, IME3122-1ES, IME3122-1EP) и Vandal Resistant Mini Domes (IMES19-1VI, IMES19-1VS, IMES19-1VP, IME119-1VI, IME119-1VS, IME119-1VP, IME219-1VI, IME219-1VS, IME219-1VP, IME319-1VI, IME319-1VS, IME319-1VP, IME3122-1VI, IME3122-1VS, IME3122-1VP) до версии 2.2.3.0: https://www.pelco.com/search#Asset%20Type!Firmware!11002,Cameras!Sarix%20IME%20Series%20Environmental!3016172,Cameras!Sarix%20IME%20Series%20Indoor%20Mini!3016169,Cameras!Sarix%20IME%20Vandal%20Mini!3016171/tab/documents Для Box Cameras (IXES1, IXE11, IXE21, IXE31) до версии 2.2.3.0: https://www.pelco.com/search#Cameras!Sarix%20IXE!3016155/tab/documents Для Spectra Enhanced PTZ (D6220, D6220L, D6230, D6230L) до версии 2.11 или выше: https://www.pelco.com/ptz-ip-cameras/spectra-enhanced-hd-ip-domecamera#downloads Компенсирующие меры для Indoor Cameras (IMES19-1I, IMES19-1S, IMES19-1P, IME119-1I, IME119-1S, IME119-1P, IME219-1I, IME219-1S, IME219-1P, IME319-1I, IME319-1S, IME319-1P, IME319-B1I, IME319-B1S, IME319-B1P, IME3122-1I, IME3122-B1I, IME3122-1S, IME3122-B1S, IME3122-1P, IME3122-B1P): Размещение сети систем управления и безопасности за брандмауэрами и изолирование от деловой сети Установление физического контроля к ICS и контроллерам безопасноти, переферийному оборудованию или ICS и сетям безопасности
Reference
None
CWE
CWE-79
To clipboard 

{
  "CVSS 2.0": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
  "CVSS 3.0": "AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Schneider Electric",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 2.2.3.0 (Indoor Cameras IME3122-1P), \u0434\u043e 2.2.3.0 (Indoor Cameras IME3122-B1S), \u0434\u043e 2.2.3.0 (Indoor Cameras IME119-1I), \u0434\u043e 2.2.3.0 (Indoor Cameras IME119-1P), \u0434\u043e 2.2.3.0 (Indoor Cameras IME119-1S), \u0434\u043e 2.2.3.0 (Indoor Cameras IME219-1I), \u0434\u043e 2.2.3.0 (Indoor Cameras IME219-1P), \u0434\u043e 2.2.3.0 (Indoor Cameras IME219-1S), \u0434\u043e 2.2.3.0 (Indoor Cameras IME3122-1I), \u0434\u043e 2.2.3.0 (Indoor Cameras IME3122-1S), \u0434\u043e 2.2.3.0 (Indoor Cameras IME3122-B1I), \u0434\u043e 2.2.3.0 (Indoor Cameras IME3122-B1P), \u0434\u043e 2.2.3.0 (Indoor Cameras IME319-1I), \u0434\u043e 2.2.3.0 (Indoor Cameras IME319-1P), \u0434\u043e 2.2.3.0 (Indoor Cameras IME319-1S), \u0434\u043e 2.2.3.0 (Indoor Cameras IME319-B1I), \u0434\u043e 2.2.3.0 (Indoor Cameras IME319-B1P), \u0434\u043e 2.2.3.0 (Indoor Cameras IME319-B1S), \u0434\u043e 2.2.3.0 (Indoor Cameras IMES19-1I), \u0434\u043e 2.2.3.0 (Indoor Cameras IMES19-1P), \u0434\u043e 2.2.3.0 (Indoor Cameras IMES19-1S), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME119-1EI), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME119-1EP), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME119-1ES), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME219-1EI), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME219-1EP), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME219-1ES), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME3122-1EI), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME3122-1EP), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME3122-1ES), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME319-1EI), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME319-1EP), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IME319-1ES), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IMES19-1EI), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IMES19-1EP), \u0434\u043e 2.2.3.0 (Environmental Cameras Mini Domes IMES19-1ES), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME119-1VI), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME119-1VP), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME119-1VS), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME219-1VI), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME219-1VP), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME219-1VS), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME3122-1VI), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME3122-1VP), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME3122-1VS), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME319-1VI), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME319-1VP), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IME319-1VS), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IMES19-1VI), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IMES19-1VP), \u0434\u043e 2.2.3.0 (Vandal Resistant Mini Domes IMES19-1VS), \u0434\u043e 2.2.3.0 (Box Cameras IXE11), \u0434\u043e 2.2.3.0 (Box Cameras IXE21), \u0434\u043e 2.2.3.0 (Box Cameras IXE31), \u0434\u043e 2.2.3.0 (Box Cameras IXES1), \u0434\u043e 2.11 (Spectra Enhanced PTZ D6220), \u0434\u043e 2.11 (Spectra Enhanced PTZ D6220L), \u0434\u043e 2.11 (Spectra Enhanced PTZ D6230), \u0434\u043e 2.11 (Spectra Enhanced PTZ D6230L)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f:\n\u0414\u043b\u044f Environmental Cameras Mini Domes (IMES19-1EI, IMES19-1ES, IMES19-1EP, IME119-1EI, IME119-1ES, IME119-1EP, IME219-1EI, IME219-1ES, IME219-1EP, IME319-1EI, IME319-1ES, IME319-1EP, IME3122-1EI, IME3122-1ES, IME3122-1EP) \u0438 Vandal Resistant Mini Domes (IMES19-1VI, IMES19-1VS, IMES19-1VP, IME119-1VI, IME119-1VS, IME119-1VP, IME219-1VI, IME219-1VS, IME219-1VP, IME319-1VI, IME319-1VS, IME319-1VP, IME3122-1VI, IME3122-1VS, IME3122-1VP) \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.2.3.0:\nhttps://www.pelco.com/search#Asset%20Type!Firmware!11002,Cameras!Sarix%20IME%20Series%20Environmental!3016172,Cameras!Sarix%20IME%20Series%20Indoor%20Mini!3016169,Cameras!Sarix%20IME%20Vandal%20Mini!3016171/tab/documents\n\n\u0414\u043b\u044f Box Cameras (IXES1, IXE11, IXE21, IXE31) \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.2.3.0:\nhttps://www.pelco.com/search#Cameras!Sarix%20IXE!3016155/tab/documents\n\n\u0414\u043b\u044f Spectra Enhanced PTZ (D6220, D6220L, D6230, D6230L) \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.11 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435:\nhttps://www.pelco.com/ptz-ip-cameras/spectra-enhanced-hd-ip-domecamera#downloads\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b \u0434\u043b\u044f Indoor Cameras (IMES19-1I, IMES19-1S, IMES19-1P, IME119-1I, IME119-1S, IME119-1P, IME219-1I, IME219-1S, IME219-1P, IME319-1I, IME319-1S, IME319-1P, IME319-B1I, IME319-B1S, IME319-B1P, IME3122-1I, IME3122-B1I, IME3122-1S, IME3122-B1S, IME3122-1P, IME3122-B1P):\n\u0420\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430\u043c\u0438 \u0438 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0442 \u0434\u0435\u043b\u043e\u0432\u043e\u0439 \u0441\u0435\u0442\u0438\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043a ICS \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0442\u0438, \u043f\u0435\u0440\u0435\u0444\u0435\u0440\u0438\u0439\u043d\u043e\u043c\u0443 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u044e \u0438\u043b\u0438 ICS \u0438 \u0441\u0435\u0442\u044f\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.02.2019",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "06.03.2019",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2019-00897",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2018-7827",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Indoor Cameras IME3122-1P, Indoor Cameras IME3122-B1S, Indoor Cameras IME119-1I, Indoor Cameras IME119-1P, Indoor Cameras IME119-1S, Indoor Cameras IME219-1I, Indoor Cameras IME219-1P, Indoor Cameras IME219-1S, Indoor Cameras IME3122-1I, Indoor Cameras IME3122-1S, Indoor Cameras IME3122-B1I, Indoor Cameras IME3122-B1P, Indoor Cameras IME319-1I, Indoor Cameras IME319-1P, Indoor Cameras IME319-1S, Indoor Cameras IME319-B1I, Indoor Cameras IME319-B1P, Indoor Cameras IME319-B1S, Indoor Cameras IMES19-1I, Indoor Cameras IMES19-1P, Indoor Cameras IMES19-1S, Environmental Cameras Mini Domes IME119-1EI, Environmental Cameras Mini Domes IME119-1EP, Environmental Cameras Mini Domes IME119-1ES, Environmental Cameras Mini Domes IME219-1EI, Environmental Cameras Mini Domes IME219-1EP, Environmental Cameras Mini Domes IME219-1ES, Environmental Cameras Mini Domes IME3122-1EI, Environmental Cameras Mini Domes IME3122-1EP, Environmental Cameras Mini Domes IME3122-1ES, Environmental Cameras Mini Domes IME319-1EI, Environmental Cameras Mini Domes IME319-1EP, Environmental Cameras Mini Domes IME319-1ES, Environmental Cameras Mini Domes IMES19-1EI, Environmental Cameras Mini Domes IMES19-1EP, Environmental Cameras Mini Domes IMES19-1ES, Vandal Resistant Mini Domes IME119-1VI, Vandal Resistant Mini Domes IME119-1VP, Vandal Resistant Mini Domes IME119-1VS, Vandal Resistant Mini Domes IME219-1VI, Vandal Resistant Mini Domes IME219-1VP, Vandal Resistant Mini Domes IME219-1VS, Vandal Resistant Mini Domes IME3122-1VI, Vandal Resistant Mini Domes IME3122-1VP, Vandal Resistant Mini Domes IME3122-1VS, Vandal Resistant Mini Domes IME319-1VI, Vandal Resistant Mini Domes IME319-1VP, Vandal Resistant Mini Domes IME319-1VS, Vandal Resistant Mini Domes IMES19-1VI, Vandal Resistant Mini Domes IMES19-1VP, Vandal Resistant Mini Domes IMES19-1VS, Box Cameras IXE11, Box Cameras IXE21, Box Cameras IXE31, Box Cameras IXES1, Spectra Enhanced PTZ D6220, Spectra Enhanced PTZ D6220L, Spectra Enhanced PTZ D6230, Spectra Enhanced PTZ D6230L",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WEB-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u0430\u043c\u0435\u0440 \u0441\u0435\u0440\u0438\u0438 Pelco Sarix Enhanced \u0438 Spectra Enhanced, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435 \u043c\u0435\u0440 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b (\u0438\u043b\u0438 \\\u00ab\u041c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u0430\u044f \u0441\u0446\u0435\u043d\u0430\u0440\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430\\\u00bb) (CWE-79)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c WEB-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u0430\u043c\u0435\u0440 \u0441\u0435\u0440\u0438\u0438 Pelco Sarix Enhanced \u0438 Spectra Enhanced \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u043d\u044a\u0435\u043a\u0446\u0438\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": null,
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-79",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,5)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,8)"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.