CVE-2018-7781
In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.
CONFIRM: https://www.schneider-electric.com/en/download/document/SEVD-2018-114-01/
CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7781
published: 3. 7. 2018