CVE-2017-9964

CVE-2017-9964 affects Schneider Electric Pelco VideoXpert Enterprise (all versions before 2.1). It is a path traversal flaw that, by sniffing communications, allows an unauthorized attacker to perform directory traversal, potentially causing authentication bypass or session hijack. Documents cons...

CVE-2017-9965

An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files...

CVE-2017-9966

A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level...

CVE-2017-9966

CVE-2017-9966 affects Schneider Electric Pelco VideoXpert Enterprise, version 2.0 and earlier. The issue is an improper limitation of access control: by replacing certain executable files, an attacker can obtain system privileges and have code execute with elevated privileges on the host. CVSS in...

CVE-2017-9964

A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal attack resulting in authentication bypass or session hijack...

CVE-2017-9965

Schneider Electric Pelco VideoXpert Enterprise 2.0 and earlier are affected by a directory traversal vulnerability (CVE-2017-9965) due to insufficient input validation. An unauthenticated attacker can view web server files via a path traversal attack. The Nuclei template notes no authentication i...

Schneider Electric Pelco VideoXpert Enterprise Directory Traversal Vulnerability

Pelco VideoXpert Enterprise is an enterprise video management system. A directory traversal vulnerability exists in Schneider Electric Pelco VideoXpert Enterprise, which allows an unauthorized attacker to perform a directory traversal attack that could lead to authentication bypass or session...

Schneider Electric Pelco VideoXpert Enterprise Directory Traversal Vulnerability (CNVD-2017-38304)

Pelco VideoXpert Enterprise is an enterprise video management system. A directory traversal vulnerability exists in Schneider Electric Pelco VideoXpert Enterprise, which can be exploited by unauthorized attackers to view web server files...

Schneider Electric Pelco VideoXpert Enterprise

CVSS v3 7.1 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: Pelco VideoXpert Enterprise Vulnerabilities: Path Traversal, Improper Access Control AFFECTED PRODUCTS Schneider Electric reports that the vulnerabilities affect the following Pelco...

Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal

Summary VideoXpert is a video management solution designed for scalability, fitting the needs surveillance operations of any size. VideoXpert Ultimate can also aggregate other VideoXpert systems, tying multiple video management systems into a single interface. Description Pelco VideoXpert suffers...

Schneider Electric Pelco VideoXpert Privilege Escalations

Summary VideoXpert is a video management solution designed for scalability, fitting the needs surveillance operations of any size. VideoXpert Ultimate can also aggregate other VideoXpert systems, tying multiple video management systems into a single interface. Description The application is...

Schneider Electric Pelco VideoXpert Privilege Escalations

Summary VideoXpert is a video management solution designed for scalability, fitting the needs surveillance operations of any size. VideoXpert Ultimate can also aggregate other VideoXpert systems, tying multiple video management systems into a single interface. Description The application is...

Schneider Electric Pelco VideoXpert Missing Encryption Of Sensitive Information

Summary VideoXpert is a video management solution designed for scalability, fitting the needs surveillance operations of any size. VideoXpert Ultimate can also aggregate other VideoXpert systems, tying multiple video management systems into a single interface. Description The software transmits...

Schneider Electric Pelco VideoXpert File Disclosure

File disclosure vulnerability in Schneider Electric Pelco VideoXpert /portal/ URI Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Schneider Electric Pelco VideoXpert auth_token Cookie Disclosure

Schneider Electric Pelco VideoXpert /portal/ URI path traversal authtoken cookie disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Schneider Electric Pelco VideoXpert Information Disclosure Vulnerability

VideoXpert is a video management solution designed for scalability to fit any size on-demand surveillance operation. An information disclosure vulnerability exists in Schneider Electric Pelco VideoXpert. An attacker could exploit the vulnerability to obtain sensitive information...

Schneider Electric Pelco VideoXpert Directory Traversal Vulnerability

VideoXpert is a video management solution designed for scalability to fit any size on-demand surveillance operation. A directory traversal vulnerability exists in Schneider Electric Pelco VideoXpert, which can be exploited by an attacker to view arbitrary files in the context of a web server...

Schneider Electric Pelco VideoXpert Elevation of Privilege Vulnerability

VideoXpert is a video management solution designed for scalability to fit any size on-demand surveillance operation. An elevation of privilege vulnerability exists in Schneider Electric Pelco VideoXpert that could allow a local attacker to elevate privileges and execute arbitrary code...

Schneider Electric Pelco VideoXpert Missing Encryption

Schneider Electric Pelco VideoXpert Missing Encryption Of Sensitive Information Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: 2.0.41 1.14.7 1.12.105 Summary: VideoXpert is a video management solution designed for scalability, fitting the needs surveillanc...

Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal Vulnerability

Pelco VideoXpert suffers from a directory traversal vulnerability. Exploiting this issue will allow an unauthenticated attacker to view arbitrary files within the context of the web server. Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal Vendor: Schneider Electric SE...