CVE-2017-9966

CVE-2017-9966 is a privilege escalation vulnerability affecting Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior, allowing an unauthorized user to gain system privileges by replacing specific files. This vulnerability has a CVSS score of 7.1 (HIGH), indicating a high impact on confidentiality, integrity, and availability, with a network attack vector and high attack complexity requiring user interaction. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has received limited community discussion and media coverage.