Critical ICSA-20-070-04 1 CVE

ICSA-20-070-04_Johnson Controls Kantech EntraPass

Published Mar 10, 2020 · Updated Mar 10, 2020

Vendor: Kantech, Johnson Controls Product: EntraPass Corporate Edition Product: EntraPass Global Edition

Summary

Joachim Kerschbaumer reported this vulnerability to Johnson Controls.

Vulnerabilities 1

Critical 9.8

CVE-2019-7589

Kantech EntraPass Improper Input Validation

A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraP…

Johnson Controls Kantech EntraPass Global Edition Kantech EntraPass Corporate Edition

Mar 10, 2020

Revision history

2020-03-10 #1
ICSA-20-070-04 Johnson Controls Kantech EntraPass

References

ICS Advisory ICSA-20-070-04 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-070-04