Sensitive Information Exposure in Schneider Electric's Pelco VideoXpert
CVE-2017-9965

5.8MEDIUM

Key Information:

Vendor

Schneider Electric
Status
Pelco Videoxpert Enterprise
Vendor
CVE Published:
2 January 2018

What is CVE-2017-9965?

A vulnerability in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and earlier allows unauthorized individuals to exploit directory traversal techniques. By manipulating file paths, attackers can gain access to sensitive web server files, potentially compromising confidential data stored within the system.

Affected Version(s)

Pelco VideoXpert Enterprise Versions 2.0 and prior

References

https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02
x_refsource_MISC
https://www.schneider-electric.com/en/download/document/S...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/102338
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-9965 : Sensitive Information Exposure in Schneider Electric's Pelco VideoXpert