PT-2018-8546 · Pelco · Pelco Videoxpert Enterprise

Publicado 2018-01-02 · Atualizado 2019-10-03 · CVE-2017-9966

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pelco VideoXpert Enterprise versions 2.0 and prior

Description A privilege escalation issue exists, allowing an unauthorized user to obtain system privileges by replacing certain files. This enables the execution of inserted code at an elevated privilege level.

Recommendations For Pelco VideoXpert Enterprise versions 2.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-9966

Produtos afetados

Pelco Videoxpert Enterprise

Referências · 5

• https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02 · Correção
• http://securityfocus.com/bid/102338 · Nota
• https://osv.dev/vulnerability/CVE-2017-9966 · Aviso do Fabricante
• https://schneider-electric.com/en/download/document/SEVD-2017-339-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-9966 · Nota de Segurança