Description
A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnson Controls | exacqVision Web Service version 20.12.2.0 and prior | unspecified – ≤ 20.12.2.0 | — |
Advisories 1
- ICSA-21-077-01 Johnson Controls Exacq Technologies exacqVision CISA ICS & IT advisories · Mar 18, 2021
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- ICS-CERT Advisory third-party-advisory