Johnson Controls exacqVision (Update A)
Successful exploitation of this vulnerability could allow an attacker with administrative privileges to potentially download and run a malicious executable that could allow the execution of operating system commands on the system.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-9047US | high7.2 | Exploit | ||
A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationexacqVision Enterprise Manager
Johnson Controls recommends taking steps to minimize risks to all building automation systems.
- MitigationexacqVision Web Service
Johnson Controls recommends taking steps to minimize risks to all building automation systems.
- FixedexacqVision Enterprise Manager
Upgrade exacqVision Enterprise Manager to v20.06.5 or higher
- FixedexacqVision Web Service
Upgrade exacqVision Enterprise Manager to v20.06.5 or higher
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan