RSS   Vulnerabilities for 'Entrapass'   RSS

2020-03-10
 
CVE-2019-7589

CWE-20
 

 
A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraPass Corporate Edition versions 8.0 and prior; Kantech EntraPass Global Edition versions 8.0 and prior.

 

 >>> Vendor: Johnsoncontrols 20 Products
Network controller
Network controller firmware
Pegasys p2000 server software
Pegasys p2000 server
Metsys
Metasys system
Exacqvision server
Entrapass
Metasys application and data server
Metasys extended application and data server
Metasys lonworks control server
Metasys open application server
Metasys open data server
Metasys system configuration tool
Kantech entrapass
Metasys reporting engine
Exacqvision web service
Exacqvision enterprise manager
Videoedge
Easyio cpt graphics


Copyright 2024, cxsecurity.com

 

Back to Top