version 21.09

An Unauthenticated Remote User Could be Given Access to Credentials Stored in the Server

Overview: Johnson Controls has confirmed a vulnerability impacting the exacqVision Web Service. The exacqVision Web Service is also included in the exacqVision Server Bundle along with the exacqVision Client and exacqVision Server. The exacqVision Web Service allows users to retrieve video and other data from exacqVision servers using a browser and mobile application. When passthrough… Continue reading An Unauthenticated Remote User Could be Given Access to Credentials Stored in the Server

An Unauthenticated Remote User Could Exploit a Potential Integer Overflow Condition in the Server and Cause DoS

Overview: Johnson Controls has confirmed a vulnerability impacting Exacq Technologies exacqVision. The exacqVision Server is also included in the exacqVision Server Bundle along with the exacqVision Client and exacqVision Web Service. Under certain circumstances an integer overflow condition could exist in the exacqVision Server. Impact: An unauthenticated remote user could exploit a potential integer overflow… Continue reading An Unauthenticated Remote User Could Exploit a Potential Integer Overflow Condition in the Server and Cause DoS