EUVD-2017-18874

Malware in sbrugna...

Privilege escalation

A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level...

CVE-2017-9965

An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files...

CVE-2017-9965

Schneider Electric Pelco VideoXpert Enterprise 2.0 and earlier are affected by a directory traversal vulnerability (CVE-2017-9965) due to insufficient input validation. An unauthenticated attacker can view web server files via a path traversal attack. The Nuclei template notes no authentication i...

CVE-2017-9964

CVE-2017-9964 affects Schneider Electric Pelco VideoXpert Enterprise (all versions before 2.1). It is a path traversal flaw that, by sniffing communications, allows an unauthorized attacker to perform directory traversal, potentially causing authentication bypass or session hijack. Documents cons...

PT-2018-8545

Name of the Vulnerable Software and Affected Versions Pelco VideoXpert Enterprise versions 2.0 and prior Description An exposure of sensitive information issue exists, allowing an unauthorized person to view web server files using a directory traversal attack. Recommendations For Pelco VideoXpert...

PT-2018-8546

Name of the Vulnerable Software and Affected Versions Pelco VideoXpert Enterprise versions 2.0 and prior Description A privilege escalation issue exists, allowing an unauthorized user to obtain system privileges by replacing certain files. This enables the execution of inserted code at an elevate...

CVE-2017-9964: Improper Limitation of a Pathname to a Restricted Directory

A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack...

CVE-2017-9965: Improper Limitation of a Pathname to a Restricted Directory

An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files...

CVE-2017-9966: Undefined Security Weakness

A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level...

PT-2018-8544

Name of the Vulnerable Software and Affected Versions Schneider Electric Pelco VideoXpert Enterprise versions prior to 2.1 Description A Path Traversal issue allows an unauthorized person to execute a directory traversal attack, potentially resulting in authentication bypass or session hijack by...

Schneider Electric Pelco VideoXpert Enterprise Directory Traversal Vulnerability (CNVD-2017-38304)

Pelco VideoXpert Enterprise is an enterprise video management system. A directory traversal vulnerability exists in Schneider Electric Pelco VideoXpert Enterprise, which can be exploited by unauthorized attackers to view web server files...

Schneider Electric Pelco VideoXpert Enterprise Directory Traversal Vulnerability

Pelco VideoXpert Enterprise is an enterprise video management system. A directory traversal vulnerability exists in Schneider Electric Pelco VideoXpert Enterprise, which allows an unauthorized attacker to perform a directory traversal attack that could lead to authentication bypass or session...