CVE-2016-4520
Critical
Description
Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors.
SeverityCritical
CVSS9.8
Exploit probability—
ProductSchneider-electric Pelco Digital Sentry Video Management System Firmware
PublishedJul 15, 2016
First seenJul 15, 2016
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric pelco_digital_sentry_video_management_system_firmware | v ≤ 7.6.32.9203 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.