Johnsoncontrols Exacqvision Server — known CVE vulnerabilities

Every CVE whose affected-product data names Johnsoncontrols Exacqvision Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-27665 — CVSS 7.5 (high): An unauthenticated remote user could exploit a potential integer overflow condition in the exacqVision Server with a specially crafted…
• CVE-2024-32758 — CVSS 7.5 (high): Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and…
• CVE-2019-7590 — CVSS 6.7 (medium): ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated…
• CVE-2024-32865 — CVSS 6.4 (medium): Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices.