CVE-2017-9966
Last modified
CVE-2017-9966 is a vulnerability of currently unknown severity. A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level.. EPSS estimates a 1.62% chance of exploitation in the next 30 days.
Description
A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | Pelco Videoxpert | < 2.1 |
References
- http://www.securityfocus.com/bid/102338Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/102338Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-355-02Patch, Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-9966?
How severe is CVE-2017-9966?
How do I fix CVE-2017-9966?
Are you affected by CVE-2017-9966?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST