ICSA-24-214-02: Exacqvision web service vulnerability
Affected Software
1 affected component
: Johnson Controls Inc. exacqVision Web Service=22.12.1.0
Event History
Feb 22, 2025
Advisory Published
11:35 PM
Frequently Asked Questions
1
What is the severity of ICSA-24-214-02?
The severity of ICSA-24-214-02 is rated as High due to potential unauthorized access to sensitive data.
2
How do I fix ICSA-24-214-02?
To fix ICSA-24-214-02, users are advised to update to the latest version of the exacqVision Web Service provided by Johnson Controls Inc.
3
What systems are affected by ICSA-24-214-02?
ICSA-24-214-02 affects the exacqVision Web Service software from Johnson Controls Inc.
4
What vulnerabilities are associated with ICSA-24-214-02?
ICSA-24-214-02 is associated with vulnerabilities that may allow remote code execution and privilege escalation.
5
Is there a workaround for ICSA-24-214-02 before applying fixes?
As a temporary workaround for ICSA-24-214-02, users should restrict access to the affected system and implement proper access controls.