Johnson Controls exacq Enterprise Manager

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to enter malicious input resulting in remote code execution.

CVEs (1)

Remediations

• Johnson Controls recommends upgrading exacq Enterprise Manager to Version 21.12.1 or apply manual mitigation steps (available upon request).
• Refer to the exacq Hardening Guide for guidance on isolating exacqVision NVRs and Enterprise Manager from public facing networks to reduce network exposure to attacks.
• For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2021-24 v1
• Further ICS security notices and product security guidance are located at Johnson Controls product security website.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing