CVE-2020-9047
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2020
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
exacqVision Software - Improper Verification of Cryptographic Signature
A vulnerability exists that could allow the execution of unauthorized code or operating system commands on systems running exacqVision Web Service versions 20.06.3.0 and prior and exacqVision Enterprise Manager versions 20.06.4.0 and prior. An attacker with administrative privileges could potentially download and run a malicious executable that could allow OS command injection on the system.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
exacqVision Web Service versions 20.03.2.0 and prior
- Vendor
- Johnson Controls
- Product
- exacqVision Web Service versions 20.03.2.0 and prior
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| unspecified | affected | custom | Unavailable | 20.03.2.0 | None listed |
exacqVision Enterprise Manager versions 20.03.3.0 and prior
- Vendor
- Johnson Controls
- Product
- exacqVision Enterprise Manager versions 20.03.3.0 and prior
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| unspecified | affected | custom | Unavailable | 20.03.3.0 | None listed |