Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Johnson Controls Component: Exacqvision Server Clear all filters
TI-2024-21632 CVE-2024-32758 · GHSA-4mjp-p7h5-xhfj

exacqVision - Key exchanges

Priority MEDIUM 41

Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange

CVSS 4.0CRITICAL 9.0 Network No auth User interaction EPSS 0.00438 Published 2024-08-01 No fix listed CWE-326
TI-2024-21737 CVE-2024-32865 · GHSA-cwqj-wjpc-hr2x

exacqVison - TLS certificate validation

Priority LOW 33

Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices.

CVSS 3.1HIGH 7.3 Adjacent network No auth User interaction EPSS 0.00131 Published 2024-08-01 No fix listed CWE-295
TI-2021-09113 CVE-2021-27665 · GHSA-vhxw-gj92-g74w

exacqVision Server 32-bit

Priority LOW 36

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01573 Published 2021-10-11 No fix listed CWE-190
TI-2019-05359 CVE-2019-7590 · GHSA-4q3f-pvfg-v946

exacqVision Server Unquoted Service Path

Priority LOW 36

ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00825 Published 2019-07-19 Fixed in next of 19.03 CWE-428