description: A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67.
problem types: XML External Entity Processing
affected:
{
product: Pelco Sarix Professional
vendor: Schneider Electric SE
versions:
status: affected, version: all firmware versions prior to 3.29.70
}