CVE-2021-27664

概要

参考情報

• us-cert.gov/ics/advisories/icsa-21-280-01 · Mitigation
• johnsoncontrols.com/cyber-solutions/security-advisories · Vendor Advisory

exacqvision web service のその他の脆弱性

• CVE-2024-32931中 5.7Under certain circumstances the exacqVision Web Service can expose authentication token details within communications.
• CVE-2024-32862高 8.1Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.
• CVE-2024-32864高 8.1Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS)
• CVE-2024-32863高 8.8Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF)
• CVE-2021-27659中 6.1exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input before it is placed in o…