Johnson Controls exacqVision
view advisory published 2021-10-07
Successful exploitation of this vulnerability could allow an unauthenticated remote user to exploit an integer overflow in the exacqVision Server with a specially crafted script and cause a denial-of-service condition.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27665US | high7.5 | — | ||
An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition. | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationexacqVision Server 32-bit
Current users can obtain the critical software update from the software download location.
https://www.exacq.com/support/downloads.php - FixedexacqVision Server 32-bit
Upgrade exacqVision Server 32-bit to Version 21.09 or upgrade to exacqVision Server 64-bit.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan