Lucene search
JciCVELIST:CVE-2024-32865HistoryAug 01, 2024 - 9:13 p.m.
CVE-2024-32865 exacqVison - TLS certificate validation
2024-08-0121:13:24
CWE-295
jci
www.cve.org
10
exacqvision
tls certificates
validation
security vulnerability
CVSS3
6.4
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
22.0%
Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "exacqVision",
"vendor": "Johnson Controls",
"versions": [
{
"lessThanOrEqual": "24.03",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-32865 exacqVison - TLS certificate validation
2024-08-01 21:13:24
nvd
nvd
CVE-2024-32865
2024-08-01 22:15:24
ics
ics
Johnson Controls exacqVision Server
2024-08-01 12:00:00
nessus
nessus
cve
cve
CVE-2024-32865
2024-08-01 22:15:24
CVSS3
6.4
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
22.0%
Related for CVELIST:CVE-2024-32865