CVE-2024-32758

2024-08-0122:15:24

CWE-326

[email protected]

web.nvd.nist.gov

exacqvision

communication

insufficient key length

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

37.6%

JSON

Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange

Affected configurations

Nvd

Node

johnsoncontrolsexacqvision_clientRange<24.06

johnsoncontrolsexacqvision_serverRange<24.06

VendorProductVersionCPE
johnsoncontrolsexacqvision_client*cpe:2.3:a:johnsoncontrols:exacqvision_client:*:*:*:*:*:*:*:*
johnsoncontrolsexacqvision_server*cpe:2.3:a:johnsoncontrols:exacqvision_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
johnsoncontrols	exacqvision_client	*	cpe:2.3:a:johnsoncontrols:exacqvision_client::::::::
johnsoncontrols	exacqvision_server	*	cpe:2.3:a:johnsoncontrols:exacqvision_server::::::::