CVE-2021-27665

CVE-2021-27665 affects exacqVision Server 32-bit (Johnson Controls) with an integer overflow vulnerability exploitable remotely by an unauthenticated attacker via a specially crafted script to cause a denial-of-service. The issue, tracked across multiple sources, is rated CVSS v3.1 base 7.5 (HIGH...

CVE-2021-27664

CVE-2021-27664 affects Exacq Technologies exacqVision Web Service. Root cause: improper privilege management that could allow an unauthenticated remote user to access credentials stored on the exacqVision Server. Affected product/versions: exacqVision Web Service 21.06.11.0 or older. Impact: cred...

CVE-2021-27665: Integer Overflow or Wraparound

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition...

PT-2021-17592

Name of the Vulnerable Software and Affected Versions exacqVision Server affected versions not specified Description The issue allows an unauthenticated remote user to access credentials stored in the exacqVision Server under certain configurations. Recommendations At the moment, there is no...

CVE-2021-27664: Improper Privilege Management

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server...

PT-2021-17593

Name of the Vulnerable Software and Affected Versions exacqVision Server affected versions not specified Description An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause a denial-of-service conditio...

CVE-2021-27665

An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted script and cause denial-of-service condition...

CVE-2021-27664

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server...

Johnson Controls exacqVision Server 输入验证错误漏洞

Johnson Controls exacqVision Server is a suite of surveillance video management software from Johnson Controls, Inc. An input validation error vulnerability exists in exacqVision Server 32-bit, which stems from the susceptibility of the affected product to an integer overflow vulnerability. An...

CVE-2019-7590

ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to...

Code injection

ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to...

CVE-2019-7590

CVE-2019-7590 affects Exacq Technologies exacqVision Server 9.6 and 9.8, due to an unquoted service path in the Windows services exacqVisionServer, dvrdhcpserver and mdnsresponder. The underlying issue is an unquoted service path that could allow an authenticated local user to insert code in the ...

CVE-2019-7590 exacqVision Server Unquoted Service Path

ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to...

PT-2019-18661

Name of the Vulnerable Software and Affected Versions Exacq Technologies, Inc. exacqVision Server versions 9.6; 9.8 Description The ExacqVision Server has an issue with unquoted service paths in its services, including 'exacqVisionServer', 'dvrdhcpserver', and 'mdnsresponder'. This could allow an...

CVE-2019-7590: Unquoted Search Path or Element

ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to...