CVE-2017-9964

CVE-2017-9964 is a Path Traversal vulnerability affecting all versions of Schneider Electric Pelco VideoXpert Enterprise prior to 2.1. An attacker can exploit this by sniffing network communications to execute a directory traversal attack. This medium-severity vulnerability (CVSS 6.9) has a network attack vector with high attack complexity, potentially leading to authentication bypass or session hijacking. There is no known active exploitation, public exploit code, or significant community discussion, with only one article covering the patch release.