CVE-2016-4520

Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2016-07-15

Last modified

2024-08-06

Affected products

• Pelco Digital Sentry Video Management System Firmware (Schneider-electric)

References

• http://www.schneider-electric.com/ww/en/download/document/SEVD-2016-153-01
• http://www.securityfocus.com/bid/91783
• https://ics-cert.us-cert.gov/advisories/ICSA-16-196-01