TI-2024-21632 CVE-2024-32758 · GHSA-4mjp-p7h5-xhfj
exacqVision - Key exchanges
Priority MEDIUM 41
Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange
Johnson Controls
Records126All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical25CVSS 9.0–10.0
CVSS high65CVSS 7.0–8.9
Exploited now
Johnson Controls records in CISA KEVNo Johnson Controls vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Exacqvision Server · all components
TI-2021-09113 CVE-2021-27665 · GHSA-vhxw-gj92-g74w
exacqVision Server 32-bit
Priority LOW 36
An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition.
TI-2019-05359 CVE-2019-7590 · GHSA-4q3f-pvfg-v946
exacqVision Server Unquoted Service Path
Priority LOW 36
ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path.
TI-2024-21737 CVE-2024-32865 · GHSA-cwqj-wjpc-hr2x
exacqVison - TLS certificate validation
Priority LOW 33
Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices.