CVE-2024-32932
American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interface
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
American Dynamics Illustra Essentials Gen 4 - Reversible User Credential - stored web interface
| Assigner | jci |
| Reserved | 2024-04-19 |
| Published | 2024-07-02 |
| Updated | 2024-08-02 |
Under certain circumstances the web interface users credentials may be recovered by an authenticated user.
| CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N |
CWE-257: Storing Passwords in a Recoverable Format
Sam Hanson of Dragos
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories
https://www.cisa.gov/news-events/ics-advisories/icsa-24-179-07
