9.8crit
CVE-2016-4520
Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote at…
Published 10 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
5.8%
percentile 93%
Public exploits
0
none known
Summary
Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors.
Exploit prediction (EPSS)
5.79% probability of exploitation in the next 30 days, higher than 93% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
- ics-cert.us-cert.gov /advisories/ICSA-16-196-01 · x_refsource_MISC, x_transferred
- securityfocus.com /bid/91783 · vdb-entry, x_refsource_BID, x_transferred
- schneider-electric.com /ww/en/download/document/SEVD-2016-153-01 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2016-4520
- NVD: CVE-2016-4520
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.