Exacq Technologies exacqVision Enterprise Manager
Advisory ansehen veröffentlicht 2021-06-29
Successful exploitation of this vulnerability could allow an attacker to send malicious requests on behalf of the victim.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-27658US | medium5.4 | — | ||
exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (2)
- MitigationexacqVision Enterprise Manager
Additional security notices and product security guidance can be found at the Johnson Controls ICS Product Security page.
https://www.johnsoncontrols.com/cyber-solutions/security-advisories - BehobenexacqVision Enterprise Manager
Johnson Controls recommends upgrading all previous versions of exacqVision Enterprise Manager to v21.03
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan