Description
An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric SE | Pelco VideoXpert Enterprise | Versions 2.0 and prior | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Schneider Electric Pelco VideoXpert Enterprise 2.0 - Path Traversal http/cves/2017/CVE-2017-9965.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- ICSA-17-355-02 Schneider Electric Pelco VideoXpert Enterprise CISA ICS & IT advisories · Dec 21, 2017