Skip to main content

Exacqvision Web Service CVE-2024-32864

HIGH
Cleartext Transmission of Sensitive Information (CWE-319)
2024-08-01 productsecurity@jci.com
Information Disclosure Exacqvision Web Service
8.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
8.1 HIGH
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Aug 01, 2024 - 21:15 nvd
HIGH 8.1

DescriptionNVD

Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS)

AnalysisAI

Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-319. Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS) Affected products include: Johnsoncontrols Exacqvision Web Service.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Exacqvision Web Service

View all
CVE-2020-9047 HIGH POC
7.2 Jun 26

A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems runni
CVE-2021-27664 CRITICAL
9.8 Oct 11

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVisi
CVE-2024-32863 HIGH
8.8 Aug 01

Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF). Rated

CVE-2024-32862 HIGH
8.1 Aug 01

Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.

CVE-2021-27656 HIGH
7.5 Mar 18

A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-le
CVE-2021-27659 MEDIUM
6.1 Jun 24

exacqVision Web Service 21.03 does not sufficiently validate, filter, escape, and/or encode user-controllable input befo
CVE-2024-32931 MEDIUM
5.7 Aug 01

Under certain circumstances the exacqVision Web Service can expose authentication token details within communications. R

Same weakness CWE-319 – Cleartext Transmission of Sensitive Information

View all
CVE-2025-26199 CRITICAL POC
9.8
CVE-2025-32880 CRITICAL POC
9.8
CVE-2023-33730 CRITICAL POC
9.8
CVE-2019-15911 CRITICAL POC
9.8
CVE-2019-18852 CRITICAL POC
9.8
CVE-2024-25735 CRITICAL POC
9.1
CVE-2023-23914 CRITICAL POC
9.1
CVE-2024-50634 HIGH POC
8.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2024-32864 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy