CVE-2021-27656

Mô tả

Tham khảo

• us-cert.cisa.gov/ics/advisories/icsa-21-077-01 · Third Party Advisory
• johnsoncontrols.com/cyber-solutions/security-advisories · Patch

Lỗ hổng khác của exacqvision web service

• CVE-2024-32931TRUNG BÌNH 5.7Under certain circumstances the exacqVision Web Service can expose authentication token details within communications.
• CVE-2024-32862CAO 8.1Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.
• CVE-2024-32864CAO 8.1Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS)
• CVE-2024-32863CAO 8.8Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF)
• CVE-2021-27664NGHIÊM TRỌNG 9.8Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server.