← Back to home
ICSA-21-119-03  ·  Published 2021-04-29  ·  View on CISA ICS-CERT ↗

Johnson Controls Exacq Technologies exacqVision

CVSS 7.0 HIGH CISA KEV — Known Exploited

Risk Summary

A local attacker could exploit this vulnerability to obtain Super User access to the underlying Ubuntu Linux operating system.

CVEs (1)

Remediations

  • Johnson Controls recommends users install the latest security updates for the Ubuntu Linux operating system.
  • Users may contact Exacq technical support for assistance with updating their operating system.
  • For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2021-04

Affected Vendors

Exacq Technologies, Johnson Controls Inc.

Affected Products (8)

Exacq Technologies, Johnson Controls Inc. · exacqVision Linux based Z-Series and A-Series
Exacq Technologies, Johnson Controls Inc. · exacqVision Q-Series
Exacq Technologies, Johnson Controls Inc. · exacqVision G-Series
Exacq Technologies, Johnson Controls Inc. · exacqVision Legacy LC-Series
Exacq Technologies, Johnson Controls Inc. · exacqVision Legacy ELP-Series
Exacq Technologies, Johnson Controls Inc. · exacqVision exacqVision Network Video Recorders (NVR)
Exacq Technologies, Johnson Controls Inc. · exacqVision Linux based C-Series Workstations
Exacq Technologies, Johnson Controls Inc. · exacqVision S-Series Storage Servers

Affected Sectors

Critical Manufacturing

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more