|
247041
|
6.9 |
MEDIUM
Network
|
schneider-electric
|
pelco_videoxpert
|
A Path Traversal issue was discovered in Schneider Electric Pelco VideoXpert Enterprise all versions prior to 2.1. By sniffing communications, an unauthorized person can execute a directory traversal…
|
CWE-22
Path Traversal
|
CVE-2017-9964
|
2024-11-21 12:37 |
2018-01-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247042
|
9.8 |
CRITICAL
Network
|
siemens
|
7kt_pac1200_data_manager_firmware
|
A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrated web server (port 80/tcp) of the affected devices could allow an unauthenticat…
|
CWE-269
Improper Privilege Management
|
CVE-2017-9944
|
2024-11-21 12:37 |
2017-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247043
|
5.3 |
MEDIUM
Network
|
siemens
|
apogee_pxc_firmware apogee_pxc_modular_firmware talon_tc_compact_firmware talon_tc_modular_firmware
|
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. A directory traversal vulnerability could allow a remote attacker with netw…
|
CWE-22
Path Traversal
|
CVE-2017-9947
|
2024-11-21 12:37 |
2017-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247044
|
7.5 |
HIGH
Network
|
siemens
|
apogee_pxc_firmware apogee_pxc_modular_firmware talon_tc_compact_firmware talon_tc_modular_firmware
|
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V3.5. An attacker with network access to the integrated web server (80/tcp and 44…
|
CWE-287
Improper Authentication
|
CVE-2017-9946
|
2024-11-21 12:37 |
2017-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247045
|
7.5 |
HIGH
Network
|
aveva
|
clearscada
|
Schneider Electric's ClearSCADA versions released prior to August 2017 are susceptible to a memory allocation vulnerability, whereby malformed requests can be sent to ClearSCADA client applications t…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9962
|
2024-11-21 12:37 |
2017-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247046
|
7.8 |
HIGH
Local
|
schneider-electric
|
pro-face_gp_pro_ex
|
A vulnerability exists in Schneider Electric's Pro-Face GP Pro EX version 4.07.000 that allows an attacker to execute arbitrary code. Malicious code installation requires an access to the computer. B…
|
NVD-CWE-noinfo
|
CVE-2017-9961
|
2024-11-21 12:37 |
2017-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247047
|
5.3 |
MEDIUM
Network
|
schneider-electric
|
u.motion_builder
|
An information disclosure vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system response to error provides more information than should b…
|
CWE-200
Information Exposure
|
CVE-2017-9960
|
2024-11-21 12:37 |
2017-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247048
|
5.5 |
MEDIUM
Local
|
schneider-electric
|
u.motion_builder
|
A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the system accepts reboot in session from unauthenticated users, supporting a denial of serv…
|
NVD-CWE-noinfo
|
CVE-2017-9959
|
2024-11-21 12:37 |
2017-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247049
|
7.8 |
HIGH
Local
|
schneider-electric
|
u.motion_builder
|
An improper access control vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which an improper handling of the system configuration can allow an attac…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2017-9958
|
2024-11-21 12:37 |
2017-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247050
|
9.8 |
CRITICAL
Network
|
schneider-electric
|
u.motion_builder
|
A vulnerability exists in Schneider Electric's U.motion Builder software versions 1.2.1 and prior in which the web service contains a hidden system account with a hardcoded password. An attacker can …
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2017-9957
|
2024-11-21 12:37 |
2017-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|