Skip to content
OpenAdvisories
Critical 1 exploited CVE ICSA-21-357-02 1 CVE

Johnson Controls exacq Enterprise Manager

Published Dec 23, 2021 · Updated Dec 23, 2021

Vendor: Exacq Technologies, Johnson Controls Product: Exacq Enterprise Manager

Summary

Successful exploitation of this vulnerability could allow an attacker to enter malicious input resulting in remote code execution.

Vulnerabilities 1

  • Critical 10.0
    CVE-2021-44228 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who …

    Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
    KEV Dec 10, 2021

Revision history

  1. #1

    Publication Date

References