Pelco records
4 published records for vendor pelco.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-346 Origin Validation Error1
- CWE-427 Uncontrolled Search Path Element1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-787 Out-of-bounds Write1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2021-27232No exploit | The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overfpelco · digital sentry server · CWE-787 | High8.8 | — | 1.7% | Feb 16, 2021 |
32Monitor | CVE-2021-27197No exploit | DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability.pelco · digital sentry server · CWE-346 | High8.1 | — | 0.7% | Feb 12, 2021 |
31Monitor | CVE-2018-7840No exploit | A Uncontrolled Search Path Element (CWE-427) vulnerability exists in VideoXpert OpsCenter versions prior to 3.1 which could allow an attackepelco · videoxpert opscenter · CWE-427 | High7.8 | — | 0.9% | May 22, 2019 |
30Monitor | CVE-2021-27184No exploit | Pelco Digital Sentry Server 7.18.72.11464 has an XML External Entity vulnerability (exploitable via the DTD parameter entities technique), rpelco · digital sentry server · CWE-611 | High7.5 | — | 1.5% | Feb 11, 2021 |
- CVE-2021-2723236Monitor
The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overf
HighCVSS 8.8No exploitEPSS 1%pelco · digital sentry serverFeb 16, 2021
- CVE-2021-2719732Monitor
DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability.
HighCVSS 8.1No exploitEPSS 0%pelco · digital sentry serverFeb 12, 2021
- CVE-2018-784031Monitor
A Uncontrolled Search Path Element (CWE-427) vulnerability exists in VideoXpert OpsCenter versions prior to 3.1 which could allow an attacke
HighCVSS 7.8No exploitEPSS 0%pelco · videoxpert opscenterMay 22, 2019
- CVE-2021-2718430Monitor
Pelco Digital Sentry Server 7.18.72.11464 has an XML External Entity vulnerability (exploitable via the DTD parameter entities technique), r
HighCVSS 7.5No exploitEPSS 1%pelco · digital sentry serverFeb 11, 2021