Johnson Controls exacqVision

Risk Summary

Successful exploitation of this vulnerability could allow an unauthenticated remote user to exploit an integer overflow in the exacqVision Server with a specially crafted script and cause a denial-of-service condition.

CVEs (1)

Remediations

• Upgrade exacqVision Server 32-bit to Version 21.09 or upgrade to exacqVision Server 64-bit.
• Current users can obtain the critical software update from the software download location.
• For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2021-18v1
• Further ICS security notices and product security guidance are located at the Johnson Controls product security website.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing