ICS Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal (CVE-2017-9965)

Rule ID

1235379

Severity

Medium

Description

An exposure of sensitive information vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. Using a directory traversal attack, an unauthorized person can view web server files.

Impact

Information disclosure

Recommendation

Update vendor's patch.

IPS Category

ICS threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A