Schneider Electric Pelco Sarix Professional elevation of privilege vulnerability (CNVD-2018-05321)

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware versions prior to 3.29.67. A remote attacker could use this vulnerability to bypass...

Schneider Electric Pelco Sarix Professional Arbitrary File Download Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67 exists because the program fails to validate shell metacharacters with...

Schneider Electric Pelco Sarix Professional Buffer Overflow Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A buffer overflow vulnerability exists in the web-based GUI in the Schneider Electric Pelco Sarix Professional using firmware versions prior to 3.29.67. A remote attacker could exploit...

Schneider Electric Pelco Sarix Professional Web interface component XML entity injection vulnerability

Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric, France.Web interface is one of the web management interfaces. An XML entity injection vulnerability exists in the import.cgi file of the Web interface component in the Schneider Electric Pelco Sari...

Schneider Electric Pelco Sarix Professional Command Execution Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67 exists because the program fails to validate shell metacharacters with...

Schneider Electric Pelco Sarix Professional Unauthorized Operation Vulnerability

The Schneider Electric Pelco Sarix Professional is a video surveillance device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Pelco Sarix Professional using firmware prior to version 3.29.67, which stems from the program failing to perform authentication...

Path traversal

A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack...

CVE-2017-9964

A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack...

CVE-2017-9964

A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack...

CVE-2017-9965

An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files...

CVE-2017-9966

A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level...

Directory traversal

An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files...

Privilege escalation

A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level...

CVE-2017-9966

A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level...

CVE-2017-9965

An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files...

CVE-2017-9964

CVE-2017-9964 affects Schneider Electric Pelco VideoXpert Enterprise (all versions before 2.1). It is a path traversal flaw that, by sniffing communications, allows an unauthorized attacker to perform directory traversal, potentially causing authentication bypass or session hijack. Documents cons...

CVE-2017-9966

CVE-2017-9966 affects Schneider Electric Pelco VideoXpert Enterprise, version 2.0 and earlier. The issue is an improper limitation of access control: by replacing certain executable files, an attacker can obtain system privileges and have code execute with elevated privileges on the host. CVSS in...

CVE-2017-9966

A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level...

CVE-2017-9965

An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files...

CVE-2017-9965

Schneider Electric Pelco VideoXpert Enterprise 2.0 and earlier are affected by a directory traversal vulnerability (CVE-2017-9965) due to insufficient input validation. An unauthenticated attacker can view web server files via a path traversal attack. The Nuclei template notes no authentication i...