Description (CNA)
A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Johnson Controls / Kantech EntraPass Security Management Software Special Edition versions 8.22 and prior | affected unspecified through 8.22 |
| Johnson Controls / Kantech EntraPass Security Management Software Corporate Edition versions 8.22 and prior | affected unspecified through 8.22 |
| Johnson Controls / Kantech EntraPass Security Management Software Global Edition versions 8.22 and prior | affected unspecified through 8.22 |
CWE
CWE-284
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- https://www.us-cert.gov/ics/advisories/ICSA-20-147-02
ADP enrichment
No English description supplied.