Johnson Controls exacqVision (Update A)
Successful exploitation of this vulnerability could allow an attacker with administrative privileges to potentially download and run a malicious executable that could allow the execution of operating system commands on the system.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-9047US | high7.2 | Exploit | ||
A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationexacqVision Enterprise Manager
Johnson Controls recommends taking steps to minimize risks to all building automation systems.
- MitigationexacqVision Web Service
Johnson Controls recommends taking steps to minimize risks to all building automation systems.
- BehobenexacqVision Enterprise Manager
Upgrade exacqVision Enterprise Manager to v20.06.5 or higher
- BehobenexacqVision Web Service
Upgrade exacqVision Enterprise Manager to v20.06.5 or higher
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan