PT-2018-17969

Name of the Vulnerable Software and Affected Versions Pelco Sarix Professional versions prior to 3.29.67 Description A vulnerability exists due to a lack of authentication for the /login/bin/set param endpoint, which could enable SSH service. Recommendations For versions prior to 3.29.67, update ...

PT-2018-17970

Name of the Vulnerable Software and Affected Versions Pelco Sarix Professional versions prior to 3.29.67 Description A remote attacker could exploit a lack of validation in the "login/bin/set param" API endpoint to delete arbitrary system files by manipulating the system.delete.sd file variable...