High ICSA-17-355-02 3 CVEs

Schneider Electric Pelco VideoXpert Enterprise

Published Dec 21, 2017 · Updated Dec 21, 2017

Vendor: Schneider Electric Product: Pelco VideoXpert Enterprise

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 3

Unscored —

CVE-2017-9964

A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By s…

Schneider Electric Pelco VideoXpert Enterprise ICS / OT

Jan 2, 2018
Unscored —

CVE-2017-9965 Scanner template

An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions …

Schneider Electric Pelco VideoXpert Enterprise ICS / OT

Jan 2, 2018
Unscored —

CVE-2017-9966

A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior.…

Schneider Electric Pelco VideoXpert Enterprise ICS / OT

Jan 2, 2018

Revision history

2017-12-21 #1
ICSA-17-355-02 Schneider Electric Pelco VideoXpert Enterprise

References

ICS Advisory ICSA-17-355-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-355-02
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-355-02