Description
A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnson Controls | Kantech EntraPass Security Management Software Special Edition versions 8.22 and prior | unspecified – ≤ 8.22 | — |
| Johnson Controls | Kantech EntraPass Security Management Software Corporate Edition versions 8.22 and prior | unspecified – ≤ 8.22 | — |
| Johnson Controls | Kantech EntraPass Security Management Software Global Edition versions 8.22 and prior | unspecified – ≤ 8.22 | — |
Advisories 1
- ICSA-20-147-02 Johnson Controls Kantech EntraPass CISA ICS & IT advisories · May 26, 2020
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- ICS-CERT Advisory third-party-advisory