First published: Thu Aug 03 2023(Updated: )
A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation.
Credit: productsecurity@jci.com productsecurity@jci.com
Affected Software | Affected Version | How to fix |
---|---|---|
Johnsoncontrols Videoedge | <6.1.1 | |
Sensormatic Electronics, LLC, a subsidiary of Johnson Controls Inc. VideoEdge | <6.1.1 | 6.1.1 |
Update VideoEdge to version 6.1.1. The update can be downloaded from www.americandynamics.net http://www.americandynamics.net under Support/Software Downloads/Network Video Recorders.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-3749 is high with a severity value of 5.5.
CVE-2023-3749 affects Johnsoncontrols Videoedge version up to 6.1.1.
A local user can edit the VideoEdge configuration file and interfere with VideoEdge operation.
To fix CVE-2023-3749, it is recommended to apply the necessary patches or updates provided by Johnsoncontrols.
More information about CVE-2023-3749 can be found on the CISA and Johnsoncontrols websites.