Author: Bhargav Atturu

Exacq Mobile 3 App Crashing

The Exacq Mobile 3 app crashes after updating to iOS 15.0, 15.0.1 and 15.0.2. Exacq Mobile 3 was impacted by an update to Apple’s WebKit that caused an issue with Canvas Rendering.Apple’s recent update to 15.1 has resolved the above mentioned issue and the Exacq Mobile 3 app is no longer crashing. Please update to… Continue reading Exacq Mobile 3 App Crashing

Adding the Arecont AV20476RS quad-imager camera with the ONVIF plugin may not have all (4) imager streams connect to the server

Issue: Adding the Arecont Vision ConteraIP Omni LX RS AV20476RS quad-imager IP cameras with the ONVIF plugin (onvifnvcPI) may not have all (4) imager streams connect to the server. Only (3) of the (4) imagers show as connected. Symptoms: All but one one imager on the client camera “settings” page appear functional and display live… Continue reading Adding the Arecont AV20476RS quad-imager camera with the ONVIF plugin may not have all (4) imager streams connect to the server

exacq Server may stop communicating with all ONVIF cameras when a user disables a stream on a multi-stream ONVIF camera

Issue: Under certain conditions, disabling one stream on a multi-stream camera may cause the ONVIF plugin (onvifnvcPI) to experience an internal error that causes it to stop communicating with the rest of the ONVIF cameras. Symptoms: The error condition requires a service restart to interact with the ONVIF plugin again and is listed in the… Continue reading exacq Server may stop communicating with all ONVIF cameras when a user disables a stream on a multi-stream ONVIF camera

An Unauthenticated Remote User Could be Given Access to Credentials Stored in the Server

Overview: Johnson Controls has confirmed a vulnerability impacting the exacqVision Web Service. The exacqVision Web Service is also included in the exacqVision Server Bundle along with the exacqVision Client and exacqVision Server. The exacqVision Web Service allows users to retrieve video and other data from exacqVision servers using a browser and mobile application. When passthrough… Continue reading An Unauthenticated Remote User Could be Given Access to Credentials Stored in the Server

An Unauthenticated Remote User Could Exploit a Potential Integer Overflow Condition in the Server and Cause DoS

Overview: Johnson Controls has confirmed a vulnerability impacting Exacq Technologies exacqVision. The exacqVision Server is also included in the exacqVision Server Bundle along with the exacqVision Client and exacqVision Web Service. Under certain circumstances an integer overflow condition could exist in the exacqVision Server. Impact: An unauthenticated remote user could exploit a potential integer overflow… Continue reading An Unauthenticated Remote User Could Exploit a Potential Integer Overflow Condition in the Server and Cause DoS

Server Hardware Monitoring Indicates False-Positive Sensor Alarms with Certain Motherboards

Issue: For systems with Q87, H110-E1, or C236 motherboards, the exacqVision Server software may transmit false-positive sensor alarms due to reading abnormally high values. Symptoms: Often, all voltage, fan, and temperature sensors will be alarmed together in the exacq Client Configure System > Hardware Monitoring tab. Root Cause: The root cause is that the System… Continue reading Server Hardware Monitoring Indicates False-Positive Sensor Alarms with Certain Motherboards

Windows OS Servers Fail to Correctly Identify Non-DST Time Zones & Prevent Local Client Video Searches from Working

Issue: Servers with Windows operating system (OS) fail to correctly identify non-Daylight-Savings-Time (DST) time zones and prevent the local client searches from working for time periods recorded during DST. Symptoms: Sporadic playback on the server using the (internal) local client and no issues with searching from the (external) client workstations. In other words: search works… Continue reading Windows OS Servers Fail to Correctly Identify Non-DST Time Zones & Prevent Local Client Video Searches from Working

How to Remove Unused Samba Services to Avoid Potentially Being Detected by a Vulnerability Scan

Procedure to remove unused Samba services to avoid potentially being detected by a vulnerability scan. Unless your server is an S-Series, these services are most likely not being used and may be disabled.