Johnson Controls Exacq Technologies exacqVision
view advisory published 2021-03-18
Successful exploitation of this vulnerability could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27656US | high7.5OT elevated | — | ||
A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the op… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationexacqVision Web Service
For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2021-03.
https://www.johnsoncontrols.com/cyber-solutions/security-advisories - FixedexacqVision Web Service
Johnson Controls recommends users upgrade exacqVision Web Service to v21.03 or higher.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan