Johnson Controls Update
2534Warning Date
Severity Level
Warning Number
Target Sector
11 October, 2020
● High
2020-1898
Manufacturing
Description:
Johnson Controls has released a security update to address a vulnerability in the following versions of Kantech EntraPass software:
- American Dynamics victor Web Client
- All versions up to and including v5.4.1
Threats:
An attacker could exploit this vulnerability by triggering a Denial of Service (DoS) attack.
Best practice and Recommendations:
The CERT team encourages users to review Johnson Controls security advisory and apply the necessary updates: