In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.
[
{
"product": "Pelco Sarix Professional V1",
"vendor": "Schneider Electric SE",
"versions": [
{
"status": "affected",
"version": "Pelco Sarix Pro 1 st generation with firmware versions prior to 3.29.69"
}
]
}
]