CVE-2017-9966: High severity Schneider-electric Pelco Videoxpert vulnerability
Published Jan 2, 2018
·Updated
A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level.
Affected Software
1 affected component
Schneider-electric Pelco Videoxpert<2.1
Remediation
Patch Available
Event History
Jan 2, 2018
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-9966?
CVE-2017-9966 is classified as a high-severity privilege escalation vulnerability.
2
How do I fix CVE-2017-9966?
To mitigate CVE-2017-9966, upgrade Schneider Electric's Pelco VideoXpert to version 2.1 or later.
3
What versions of Pelco VideoXpert are affected by CVE-2017-9966?
CVE-2017-9966 affects Pelco VideoXpert Enterprise versions 2.0 and prior.
4
What type of vulnerability is CVE-2017-9966?
CVE-2017-9966 is a privilege escalation vulnerability that allows unauthorized users to gain elevated system privileges.
5
Can CVE-2017-9966 be exploited remotely?
CVE-2017-9966 requires local access to the system to exploit the vulnerability.