CVE Vulnerabilities

CVE-2024-32758

Inadequate Encryption Strength

Published: Aug 01, 2024 | Modified: Aug 09, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange

Weakness

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

Affected Software

Name Vendor Start Version End Version
Exacqvision_client Johnsoncontrols * 24.06 (excluding)
Exacqvision_server Johnsoncontrols * 24.06 (excluding)

Potential Mitigations

References