Lucene search

JciCVE-2024-32758

HistoryAug 01, 2024 - 10:15 p.m.

CVE-2024-32758

2024-08-0122:15:24

CWE-326

jci

web.nvd.nist.gov

exacqvision

communication

key length

vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

37.6%

JSON

Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange

Affected configurations

Nvd

Node

johnsoncontrolsexacqvision_clientRange<24.06

johnsoncontrolsexacqvision_serverRange<24.06

VendorProductVersionCPE
johnsoncontrolsexacqvision_client*cpe:2.3:a:johnsoncontrols:exacqvision_client:*:*:*:*:*:*:*:*
johnsoncontrolsexacqvision_server*cpe:2.3:a:johnsoncontrols:exacqvision_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
johnsoncontrols	exacqvision_client	*	cpe:2.3:a:johnsoncontrols:exacqvision_client::::::::
johnsoncontrols	exacqvision_server	*	cpe:2.3:a:johnsoncontrols:exacqvision_server::::::::

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "exacqVision",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/news-events/ics-advisories/icsa-24-214-01

www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

37.6%

JSON

Related for CVE-2024-32758