CVE-2021-27184

CVE-2021-27184 is an XML External Entity (XXE) vulnerability affecting Pelco Digital Sentry Server 7.18.72.11464. This flaw allows for the disclosure and retrieval of arbitrary data on the affected system through an out-of-band attack, triggered by unsanitized XML input when DSControlPoint.exe processes the ControlPointCacheShare.xml file. Rated 7.5 HIGH on CVSS, it is a network-exploitable vulnerability with low attack complexity, requiring no user interaction, and leading to high confidentiality impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.