PT-2018-8546 · Pelco · Pelco Videoxpert Enterprise

Published 2018-01-02 · Updated 2019-10-03 · CVE-2017-9966

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Pelco VideoXpert Enterprise versions 2.0 and prior

Description A privilege escalation issue exists, allowing an unauthorized user to obtain system privileges by replacing certain files. This enables the execution of inserted code at an elevated privilege level.

Recommendations For Pelco VideoXpert Enterprise versions 2.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-9966

Affected Products

Pelco Videoxpert Enterprise

References · 5

• https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02 · Patch
• https://osv.dev/vulnerability/CVE-2017-9966 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9966 · Security Note
• http://securityfocus.com/bid/102338 · Note
• https://schneider-electric.com/en/download/document/SEVD-2017-339-01 · Note