American Dynamics Illustra Essentials Gen 4 - Log Filter Input Validation

CVE-2024-32755

What is CVE-2024-32755?

A vulnerability exists in the web interface of Johnson Controls products, where specific circumstances permit the acceptance of characters that are not aligned with the expected input. This scenario can lead to potential security risks, as it may allow attackers to exploit the application by injecting unexpected data or commands. Organizations utilizing affected Johnson Controls solutions should evaluate their systems promptly to mitigate possible exposure from this input validation flaw.

References