Schneider Electric Pelco Videoxpert vulnerabilities

3 CVEs affecting Schneider Electric Pelco Videoxpert, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-9966, published 2018-01-02.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-9965, published 2018-01-02. Medium severity, CVSS 5.8. EPSS: 4.6% chance of exploitation in the next 30 days. An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can…
• CVE-2017-9964, published 2018-01-02. Medium severity, CVSS 6.9. EPSS: 2% chance of exploitation in the next 30 days. A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal…
• CVE-2017-9966, published 2018-01-02. High severity, CVSS 7.1. EPSS: 1.6% chance of exploitation in the next 30 days. A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges…