Skip to content
OpenAdvisories
Medium ICSA-19-199-01 1 CVE

Johnson Controls exacqVision Server

Published Jul 18, 2019 · Updated Jul 18, 2019

Vendor: Exacq Technologies, Johnson Controls Product: exacqVision Server

Summary

Successful exploitation of this vulnerability could allow an unauthenticated user to elevate their privileges.

Vulnerabilities 1

  • Medium 6.7
    CVE-2019-7590

    exacqVision Server Unquoted Service Path

    ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This…

    Exacq Technologies exacqVision Server

Revision history

  1. #1

    ICSA-19-199-01 Johnson Controls exacqVision Server

References