CVEvulnerability
CVE-2016-4520
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-07-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors.
Affected configurations
• schneider-electric pelco digital sentry video management system firmware (<= 7.6.32.9203)
References
- http://www.schneider-electric.com/ww/en/download/document/SEVD-2016-153-01 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/91783 www.securityfocus.com
- https://ics-cert.us-cert.gov/advisories/ICSA-16-196-01 Third Party Advisory, US Government Resource
- http://www.schneider-electric.com/ww/en/download/document/SEVD-2016-153-01 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/91783 www.securityfocus.com
- https://ics-cert.us-cert.gov/advisories/ICSA-16-196-01 Third Party Advisory, US Government Resource