295 matches found
Schneider Electric Pelco VideoXpert Missing Encryption Of Sensitive Information
Summary VideoXpert is a video management solution designed for scalability, fitting the needs surveillance operations of any size. VideoXpert Ultimate can also aggregate other VideoXpert systems, tying multiple video management systems into a single interface. Description The software transmits...
Schneider Electric Pelco VideoXpert Privilege Escalations
Summary VideoXpert is a video management solution designed for scalability, fitting the needs surveillance operations of any size. VideoXpert Ultimate can also aggregate other VideoXpert systems, tying multiple video management systems into a single interface. Description The application is...
Pelco VideoXpert 1.12.105 - Directory Traversal
Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: 2.0.41 1.14.7 1.12.105 Summary: VideoXpert is a video management solution designed for scalability, fitting the needs surveillance...
Unspecified Vulnerability in Schneider Electric Pelco Digital Sentry Video Management System
Schneider Electric Pelco Digital Sentry Video Management System is a video recording system from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Digital Sentry Video Management System using firmware prior to version 7.13, which stems from the program's u...
CVE-2016-4520
Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors...
CVE-2016-4520
Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors...
Hardcoded credentials
Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors...
CVE-2016-4520
CVE-2016-4520 affects Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14, which contains hard-coded credentials that may allow remote attackers to gain access and, consequently, execute arbitrary code. The vulnerability is exploitable remotely over the netwo...
Schneider Electric Pelco DS-NVs Buffer Overflow Vulnerability
OVERVIEW NCCIC/ICS-CERT received a report from HP’s Zero Day Initiative ZDI concerning a buffer overflow vulnerability in Schneider Electric’s Pelco DS-NVs software package. This vulnerability was reported to ZDI by security researchers Ariele Caltabiano and Andrea Micalizzi. Schneider Electric h...
Schneider Electric Pelco DS-NVs Rvctl.RVControl Buffer Overflow (CVE-2015-0982)
A buffer overflow vulnerability exists in Schneider Electric Pelco DS-NV Software package. The vulnerability is due to insufficient input validation on a user-supplied input in the SetText method before it is copied into a fixed length buffer on stack. A remote unauthenticated attacker can exploi...
Schneider Electric Pelco DS-NVs Buffer Overflow Vulnerability
Schneider Electric Pelco DS-NVs is a suite of IP video management software from Schneider Electric France. A buffer overflow vulnerability exists in the DLL for Schneider Electric Pelco DS-NVs versions prior to 7.8.90. A remote attacker could exploit this vulnerability to execute arbitrary code...
CVE-2015-0982
Buffer overflow in an unspecified DLL in Schneider Electric Pelco DS-NVs before 7.8.90 allows remote attackers to execute arbitrary code via unspecified vectors...
Buffer overflow
Buffer overflow in an unspecified DLL in Schneider Electric Pelco DS-NVs before 7.8.90 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2015-0982
The CVE-2015-0982 issue affects Schneider Electric Pelco DS-NVs software. The root cause is a stack-based buffer overflow in the rvctl.dll ActiveX control (RVControl.1) SetText path, allowing remote attackers to trigger arbitrary code execution when a user opens a malicious file or visits a craft...
