CVE-2017-9966
7.1
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD
Description
A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level.
Affected (1)
Products: Schneider Electric: Pelco Videoxpert
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.1 |
References (6)
Source: cybersecurity@se.com
PatchThird Party AdvisoryUS Government Resource
Source: cybersecurity@se.com
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.