Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2020-9047

exacqVision Software - Improper Verification of Cryptographic Signature

Description

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could potentially download and run a malicious executable that could allow OS command injection on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Controls exacqVision Web Service versions 20.03.2.0 and prior

  • unspecified to ≤ 20.03.2.0affected

Johnson Controls exacqVision Enterprise Manager versions 20.03.3.0 and prior

  • unspecified to ≤ 20.03.3.0affected

References