Integer overflow

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition...

CVE-2021-27665

CVE-2021-27665 affects exacqVision Server 32-bit (Johnson Controls) with an integer overflow vulnerability exploitable remotely by an unauthenticated attacker via a specially crafted script to cause a denial-of-service. The issue, tracked across multiple sources, is rated CVSS v3.1 base 7.5 (HIGH...

CVE-2021-27665 exacqVision Server 32-bit

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition...

CVE-2021-27664 exacqVision Web Service

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server...

CVE-2021-27664

CVE-2021-27664 affects Exacq Technologies exacqVision Web Service. Root cause: improper privilege management that could allow an unauthenticated remote user to access credentials stored on the exacqVision Server. Affected product/versions: exacqVision Web Service 21.06.11.0 or older. Impact: cred...

CVE-2021-27664: Improper Privilege Management

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server...

CVE-2021-27665: Integer Overflow or Wraparound

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition...

PT-2021-17593

Name of the Vulnerable Software and Affected Versions exacqVision Server affected versions not specified Description An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause a denial-of-service conditio...

PT-2021-17592

Name of the Vulnerable Software and Affected Versions exacqVision Server affected versions not specified Description The issue allows an unauthenticated remote user to access credentials stored in the exacqVision Server under certain configurations. Recommendations At the moment, there is no...

CVE-2021-27664

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server...

CVE-2021-27665

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition...

Johnson Controls exacqVision Server 输入验证错误漏洞

Johnson Controls exacqVision Server is a suite of surveillance video management software from Johnson Controls, Inc. An input validation error vulnerability exists in exacqVision Server 32-bit, which stems from the susceptibility of the affected product to an integer overflow vulnerability. An...

Johnson Controls exacqVision Web Service 安全漏洞

Johnson Controls exacqVision Web Service is a Johnson Controls, Inc. program that supports viewing live video, searching and playing video using a Web browser. A security vulnerability exists in Johnson Controls exacqVision Web Service that stems from the software not properly assigning, modifyin...

Johnson Controls exacqVision

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Exacq Technologies, a subsidiary of Johnson Controls, Inc. Equipment: exacqVision Server 32-bit Vulnerability: Integer Overflow or Wraparound 2. RISK EVALUATION Successful exploitation of this...

Johnson Controls exacqVision Web Service Detection

Binary data exacqVisionwebservicedetect.nbin...

Johnson Controls exacqVision Web Service Information Disclosure (JCI-PSA-2021-03)

Binary data exacqVisionwebservicecve-2021-27656.nbin...

CVE-2021-27658

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2021-27659

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2021-27658

exacqVision Enterprise Manager 20.12 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...

CVE-2021-27659

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in output that is used as a web page that is served to other users...