References https://nvd.nist.gov/vuln/detail/CVE-2017-9965 https://www.cisa.gov/news-events/ics-advisories/icsa-17-355-02 https://avd.aliyun.com/detail?id=AVD-2017-9965 https://www.schneider-electric.com/en/download/document/SEVD-2017-339-01/ https://www.exploit-db.com/exploits/42311 https://vulners.com/cnvd/CNVD-2017-38304 https://securityaffairs.com/67108/hacking/pelco-videoxpert-flaws.html https://www.securityweek.com/schneider-electric-patches-flaws-pelco-video-management-system/ https://s4e.io/tools/schneider-electric-pelco-videoxpert-enterprise-path-traversal-cve-2017-9965 https://www.zeroscience.mk/old2/en/vulnerabilities/ZSL-2017-5419.php
Related VulnerabilitiesPoCCVE-2026-20253: Splunk Enterprise & Cloud Platform - Unrestricted File UploadTRUfusion Enterprise /trufusionPortal/getProjectList 权限绕过漏洞(CVE-2025-27223)Schneider Electric APC NMC /Forms/login1 默认口令漏洞智能环保云平台 /Enterprise/CreateCode_Simple SQL 注入漏洞PoCTRUfusion Enterprise /trufusionPortal/getCobrandingData 文件读取漏洞(CVE-2025-27222)PoCCVE-2025-32355: Rocket TRUfusion Enterprise - Server Side Request ForgeryPoCCVE-2018-7765: Schneider Electric U.motion Builder - SQL InjectionPoC安科瑞-智能环保云平台 /MainMonitor/GetEnterpriseInfoMapByDate/GetDates SQL 注入漏洞Elastic Cloud Enterprise 访问控制不当漏洞 可导致权限提升TRUfusion Enterprise 认证绕过漏洞(CVE-2025-27223)TRUfusion Enterprise 目录遍历漏洞(CVE-2025-27222)