Skip to content
OpenAdvisories
Medium ICSA-24-214-05 1 CVE

Johnson Controls exacqVision Server

Published Aug 1, 2024 · Updated Aug 1, 2024

Vendor: Johnson Controls Product: exacqVision Server

Summary

Successful exploitation of this vulnerability could allow an attacker to perform a man-in-the-middle attack and intercept communications.

Vulnerabilities 1

  • Medium 6.4
    CVE-2024-32865

    exacqVison - TLS certificate validation

    Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices.

    Johnson Controls exacqVision

Revision history

  1. #1

    Initial Publication

References