RSS   Vulnerabilities for 'Exacqvision server'   RSS

2021-10-11
 
CVE-2021-27665

CWE-190
 

 
An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition.

 
2019-07-19
 
CVE-2019-7590

CWE-428
 

 
ExacqVision Server?s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to elevate privileges on the system. This issue affects: Exacq Technologies, Inc. exacqVision Server 9.6; 9.8. This issue does not affect: Exacq Technologies, Inc. exacqVision Server version 9.4 and prior versions; 19.03. It is not known whether this issue affects: Exacq Technologies, Inc. exacqVision Server versions prior to 8.4.

 

 >>> Vendor: Johnsoncontrols 20 Products
Network controller
Network controller firmware
Pegasys p2000 server software
Pegasys p2000 server
Metsys
Metasys system
Exacqvision server
Entrapass
Metasys application and data server
Metasys extended application and data server
Metasys lonworks control server
Metasys open application server
Metasys open data server
Metasys system configuration tool
Kantech entrapass
Metasys reporting engine
Exacqvision web service
Exacqvision enterprise manager
Videoedge
Easyio cpt graphics


Copyright 2024, cxsecurity.com

 

Back to Top