CVE-2024-32758
exacqVision - Key exchanges
CVE-2024-32758 is a critical vulnerability (CVSS 9.0) in Johnson Controls Exacqvision, published August 1, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. No source names a fixed version.
- Severity
- 9.0 CriticalCVSS 4.0, CVE List
- Exploit chance
- 0.44%EPSS, 38th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Passive
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
Affected products
What each source reports
CVE List Score used
exacqVision - Key exchanges
Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange
- Record
CVE-2024-32758- CVSS 4.0
- 9.0 Critical
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H - Weakness
- CWE-326
- Updated
- 2026-11-02
EUVDEUVD-2024-30545
Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange
- Record
EUVD-2024-30545- CVSS 4.0
- 9.0 Critical
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4mjp-p7h5-xhfj
Under certain circumstances the communication between exacqVision Client and exacqVision Server...
Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange
- Record
GHSA-4mjp-p7h5-xhfj- CVSS 4.0
- 9.0 Critical
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-326
- Updated
- 2026-11-02
NVD
Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchange
- Record
CVE-2024-32758- CVSS 4.0
- 9.0 Critical
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-326
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.