CVE-2018-7840 A Uncontrolled Search Path Element (CWE-427) vulnerability exists in VideoXpert OpsCenter versions prior to 3.1 which could allow an attacker to cause the system to call an incorrect DLL.
HighCVSS 7.8
EPSS 0.94%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Uncontrolled Search Path Element (CWE-427) vulnerability exists in VideoXpert OpsCenter versions prior to 3.1 which could allow an attacker to cause the system to call an incorrect DLL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Pelco, Inc. videoxpert opscenter | < 3.1 | 3.1 |
| VideoXpert OpsCenter versions prior to 3.1 | = VideoXpert OpsCenter versions prior to 3.1 | No fix listed |
References
- www.schneider-electric.com third-party-advisory