PT-2019-2336 · Pelco · Pelco Endura +1

Name of the Vulnerable Software and Affected Versions: Pelco Endura affected versions not specified NET55XX Encoder versions prior to 2.1.9.7 Description: The issue is related to improper authentication, which could allow a remote attacker to impact the confidentiality, integrity, and availabilit...

The vulnerability of the WEB interface of the microprogramming software for Pelco Sarix Enhanced cameras allows a intruder to execute arbitrary commands.

The vulnerability of the WEB interface of Pelco Sarix Enhanced camera software systems is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands through the WEB interface...

The vulnerability of the WEB interface of the microprogrammed software for Pelco Sarix Enhanced cameras allows a intruder to execute arbitrary commands.

The vulnerability of the WEB interface of Pelco Sarix Enhanced camera software systems is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands through the WEB interface...

The vulnerability of the web interface of the microprogramming software for Pelco cameras, models Sarix Enhanced and Spectra Enhanced, allows a intruder to execute any JavaScript code in the user’s browser.

The vulnerability of the web interfaces of Pelco Sarix Enhanced and Spectra Enhanced microprogramming systems lies in the insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser...

The vulnerability of the microprogrammed software of Pelco Sarix Enhanced and Spectra Enhanced cameras, related to insufficient neutralization of specific elements in the request, allows a intruder to execute arbitrary system commands.

The vulnerability of the microprogrammed software in Pelco Sarix Enhanced and Spectra Enhanced cameras is related to the insufficient neutralization of specific elements in the request. Exploiting this vulnerability can allow a intruder to execute arbitrary system commands...

The vulnerability of the web interface of Pelco Sarix Enhanced camera software allows a intruder to delete any file they desire.

The vulnerability of the WEB interface of Pelco Sarix Enhanced camera software systems is related to errors in access control management. Exploiting this vulnerability could allow a remote attacker to delete any file they desire...

The vulnerability of the microprogramming software used in Pelco Sarix Enhanced and Spectra Enhanced cameras arises from insufficient verification of the authenticity of the requests being sent. This allows intruders to gain access to the camera’s interface.

The vulnerability of the microprogramming software used in Pelco Sarix Enhanced and Spectra Enhanced cameras is related to insufficient verification of the authenticity of the requests being sent. Exploiting this vulnerability can allow a intruder to gain access to the camera through a specially...

Schneider Electric Pelco Endura NET55XX Encoder

This module exploits inadequate access controls within the webUI to enable the SSH service and change the root password. This module has been tested successfully on: NET5501, NET5501-I, NET5501-XT, NET5504, NET5500, NET5516, NET550 versions. Module Options msf use...

Schneider Electric Pelco Digital Sentry Video Management System Vulnerability

OVERVIEW Schneider Electric has identified a hard-coded credential vulnerability in Schneider Electric’s Pelco Digital Sentry Video Management System. Schneider Electric has produced a new firmware version to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED...

Unauthorized access vulnerability in snap.cgi of Schneider Pelco Sarix Pro camera

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. An unauthorized access vulnerability exists in the snap.cgi of the Schneider Pelco Sarix Pro camera. The vulnerability stems from the lack of privilege checks on the snap.cgi interface, which can be exploited by an...

Command Injection Vulnerability in Schneider Pelco Sarix Pro camera set program network.ieee8021x.delete_certs

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. A command injection vulnerability exists in the Schneider Pelco Sarix Pro camera set program network.ieee8021x.deletecerts, which can be exploited by an attacker to execute arbitrary commands in the background via an...

Schneider Pelco Sarix Pro camera snapshot.cgi has an unauthorized access vulnerability

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. An unauthorized access vulnerability exists in the snapshot.cgi of the Schneider Pelco Sarix Pro camera. The vulnerability stems from the lack of privilege checks on the snapshot.cgi interface, which can be exploited b...

Arbitrary file deletion vulnerability in Schneider Pelco Sarix Pro camera set program system.delete.sd_file

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. An arbitrary file deletion vulnerability exists in the Schneider Pelco Sarix Pro camera set program system.delete.sdfile, which can be exploited by an attacker to delete arbitrary system files via an http request...

Schneider Pelco Sarix Pro camera fastjpeg has unauthorized access vulnerability

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. An unauthorized access vulnerability exists in the Schneider Pelco Sarix Pro camera fastjpeg, which stems from the lack of privilege checks on the fastjpeg interface, and can be exploited by an attacker to gain...

Command Injection Vulnerability in Schneider Pelco Sarix Pro Camera set Program system.opkg.remove

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. A command injection vulnerability exists in the Schneider Pelco Sarix Pro camera set program system.opkg.remove, which can be exploited by an attacker to execute arbitrary commands in the background via an http request...

Command Injection Vulnerability in Schneider Pelco Sarix Pro Camera set Program system.download.sd_file

Pelco Sarix Pro is a video surveillance device from Schneider Electric France. A command injection vulnerability exists in the Schneider Pelco Sarix Pro camera set program system.download.sdfile, which can be exploited by an attacker to execute arbitrary commands in the background via an http...

Schneider Electric Pelco Sarix Professional 1st generation cameras authentication password disclosure vulnerability

Schneider Electric Pelco Sarix Professional 1st generation cameras is an IP camera device from Schneider Electric France. A security vulnerability exists in Schneider Electric Pelco Sarix Professional 1st generation cameras using firmware versions prior to 3.29.69. The vulnerability can be...

Schneider Electric Pelco Sarix Professional 1st generation cameras elevation of privilege vulnerability

Schneider Electric Pelco Sarix Professional 1st generation cameras is an IP camera device from Schneider Electric France. A security vulnerability exists in Schneider Electric Pelco Sarix Professional 1st generation cameras using firmware versions prior to 3.29.69. The vulnerability can be...

Schneider Electric Pelco Sarix Professional 1st generation cameras buffer overflow vulnerability

Schneider Electric Pelco Sarix Professional 1st generation cameras is an IP camera device from Schneider Electric France. A buffer overflow vulnerability exists in the cgi program 'set' in Schneider Electric Pelco Sarix Professional 1st generation cameras using firmware versions prior to 3.29.69...

CVE-2018-7781

In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation...