CWE Code: 798
Vulnerability Type: privilege_escalation
CVSS Score: 7.5
CWE Name:  Use of Hard-coded Credentials
Summary: a vulnerability exists in schneider electric's pelco sarix professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and gain administrator privileges because the use of hardcoded credentials.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-03-09
Last Modified Date: 2018-03-27