medium5.8
CVE-2017-9965
An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior.
Impact
An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Pelco Videoxpert | before 2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/102338
- https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02
- https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/
- http://www.securityfocus.com/bid/102338
- https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02
- https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/