CVE-2019-7590

CVE-2019-7590 affects Exacq Technologies exacqVision Server 9.6 and 9.8, due to an unquoted service path in the Windows services exacqVisionServer, dvrdhcpserver and mdnsresponder. The underlying issue is an unquoted service path that could allow an authenticated local user to insert code in the ...

CVE-2024-32758

CVE-2024-32758 affects Johnson Controls exacqVision client/server communications, where under certain conditions the key exchange uses insufficient length. Affected: exacqVision Client and Server (all versions). Root cause: inadequate encryption strength leading to potential decryption of traffic...

CVE-2021-27665

CVE-2021-27665 affects exacqVision Server 32-bit (Johnson Controls) with an integer overflow vulnerability exploitable remotely by an unauthenticated attacker via a specially crafted script to cause a denial-of-service. The issue, tracked across multiple sources, is rated CVSS v3.1 base 7.5 (HIGH...

CVE-2024-32865

Johnson Controls exacqVision Server is affected by CVE-2024-32865 due to improper TLS certificate validation. Affected products: exacqVision Server (versions 24.03 and earlier). The vulnerability enables a remote attacker to perform MITM under certain conditions. Mitigation: update to version 24....