CVE Catalog

CVE-2016-4520

Critical
Published: Translated: NVD NIST

Summary

The Schneider Electric Pelco Digital Sentry Video Management System with firmware before version 7.14 has hardcoded credentials, allowing remote attackers to gain access and execute arbitrary code.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and potential takeover, posing a serious security threat to the organization.

Recommendation

It is recommended to update the firmware to version 7.14 or later to eliminate hardcoded credentials and minimize the risk of attack.

Original NVD description (English source)

Schneider Electric Pelco Digital Sentry Video Management System with firmware before 7.14 has hardcoded credentials, which allows remote attackers to obtain access, and consequently execute arbitrary code, via unspecified vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS