Exacq Technologies exacqVision Enterprise Manager
view advisory published 2021-06-29
Successful exploitation of this vulnerability could allow an attacker to send malicious requests on behalf of the victim.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27658US | medium5.4 | — | ||
exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationexacqVision Enterprise Manager
Additional security notices and product security guidance can be found at the Johnson Controls ICS Product Security page.
https://www.johnsoncontrols.com/cyber-solutions/security-advisories - FixedexacqVision Enterprise Manager
Johnson Controls recommends upgrading all previous versions of exacqVision Enterprise Manager to v21.03
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan