CWE Code: 311
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Missing Encryption of Sensitive Data
Summary: in schneider electric pelco sarix professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2018-07-03
Last Modified Date: 2019-10-03