Johnson Controls exacqVision (Update A)

Summary

Vulnerabilities 1

• Medium 6.8
  CVE-2020-9047 Public exploit Scanner template

  exacqVision Software - Improper Verification of Cryptographic Signature

  A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with a…

  Johnson Controls exacqVision Enterprise Manager versions 20.03.3.0 and prior exacqVision Web Service versions 20.03.2.0 and prior
  Jun 26, 2020

Revision history

1. 2020-07-02 #2

   ICSA-20-170-01 Johnson Controls exacqVision (Update A)

2. 2020-06-18 #1

   ICSA-20-170-01 Johnson Controls exacqVision

References

• ICS Advisory ICSA-20-170-01 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-20-170-01
• Recommended Practices
  https://www.us-cert.gov/ncas/tips/ST04-014
• Recommended Practices
  https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B