7.1
CVE-2017-9966
- EPSS 0.53%
- Published 02.01.2018 03:29:00
- Last modified 21.11.2024 03:37:16
- Source cybersecurity@se.com
- Teams watchlist Login
- Open Login
A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level.
Data is provided by the National Vulnerability Database (NVD)
Schneider-electric ≫ Pelco Videoxpert SwEditionenterprise Version < 2.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.53% | 0.662 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.1 | 1.2 | 5.9 |
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.1 | 3.9 | 10 |
AV:N/AC:H/Au:S/C:C/I:C/A:C
|