CVE-2016-4520

Опубликовано: 15 июл. 2016

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors.

Комментарий

CWE-798: Use of Hard-coded Credentials

Ссылки

http://www.schneider-electric.com/ww/en/download/document/SEVD-2016-153-01
Patch
Vendor Advisory
http://www.securityfocus.com/bid/91783
https://ics-cert.us-cert.gov/advisories/ICSA-16-196-01
Third Party Advisory
US Government Resource
http://www.schneider-electric.com/ww/en/download/document/SEVD-2016-153-01
Patch
Vendor Advisory
http://www.securityfocus.com/bid/91783
https://ics-cert.us-cert.gov/advisories/ICSA-16-196-01
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:schneider-electric:pelco_digital_sentry_video_management_system_firmware:*:*:*:*:*:*:*:*

Версия до 7.6.32.9203 (включая)

EPSS

Процентиль: 86%

0.02714

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-f58f-j29m-hpgw