CVE-2020-9046

HIGH 7.8CVE-2020-9046 · Published 26/05/2020 · updated 17/06/2026

In short

CVE-2020-9046 is a HIGH (CVSS 7.8) vulnerability affecting kantech entrapass (johnsoncontrols).
Chance of exploitation in the next 30 days (EPSS): 0.30%, higher than 22.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kantech entrapass johnsoncontrols	`≤ 8.22`	No fix yet

Description

A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files.

References

johnsoncontrols.com/cyber-solutions/security-advisories · Vendor Advisory
us-cert.gov/ics/advisories/ICSA-20-147-02 · Third Party Advisory

More vulnerabilities in kantech entrapass

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free