Johnson Controls exacqVision client and exacqVision server
Successful exploitation of this vulnerability could allow an attacker to be able to decrypt communications between exacqVision Server and exacqVision Client due to insufficient key length and exchange.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-32758US | high7.5 | — | ||
Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-214-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-214-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationexacqVision Client
Aligning with CISA recommendations, Johnson Controls recommends taking steps to minimize risks to all building automation systems.
- MitigationexacqVision Server
Aligning with CISA recommendations, Johnson Controls recommends taking steps to minimize risks to all building automation systems.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan