CVE-2024-32753

TYCO Illustra Pro Gen 4 - JQuery version

Description

Under certain circumstances the camera may be susceptible to known vulnerabilities associated with the JQuery versions prior to 3.5.0 third-party component

Remediation

Solution:

* Update firmware of Pro4 Fixed cameras to Illustra.SS016.24.03.00.0007 * Update firmware of Pro4 PTZ cameras to Illustra.SS010.24.03.00.0005 * Update firmware of Flex4 Fixed & PTZ cameras to Illustra.SS018.24.03.00.0010 * Update firmware of Pro4 MultiSensor cameras to Illustra.SS017.24.03.00.0009 * Update firmware of Flex4 DualSensor cameras to Illustra.SS022.24.03.00.0008

7.0

CVSS

Severity: High

CVSS 4.0 •

EPSS 0.18%

Affected: Johnson Controls TYCO Illustra Pro4 Fixed cameras

Affected: Johnson Controls TYCO Illustra Pro4 PTZ cameras

Affected: Johnson Controls TYCO Illustra Flex4 Fixed & PTZ cameras

Affected: Johnson Controls TYCO Illustra Pro4 MultiSensor Cameras

Affected: Johnson Controls TYCO Illustra Flex4 DualSensor Cameras

References

Link	Tags
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories
https://www.cisa.gov/news-events/ics-advisories/icsa-24-191-03

Frequently Asked Questions

What is the severity of CVE-2024-32753?: CVE-2024-32753 has been scored as a high severity vulnerability.
How to fix CVE-2024-32753?: To fix CVE-2024-32753: * Update firmware of Pro4 Fixed cameras to Illustra.SS016.24.03.00.0007 * Update firmware of Pro4 PTZ cameras to Illustra.SS010.24.03.00.0005 * Update firmware of Flex4 Fixed & PTZ cameras to Illustra.SS018.24.03.00.0010 * Update firmware of Pro4 MultiSensor cameras to Illustra.SS017.24.03.00.0009 * Update firmware of Flex4 DualSensor cameras to Illustra.SS022.24.03.00.0008
Is CVE-2024-32753 being actively exploited in the wild?: As for now, there are no information to confirm that CVE-2024-32753 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2024-32753?: CVE-2024-32753 affects Johnson Controls TYCO Illustra Pro4 Fixed cameras, Johnson Controls TYCO Illustra Pro4 PTZ cameras, Johnson Controls TYCO Illustra Flex4 Fixed & PTZ cameras, Johnson Controls TYCO Illustra Pro4 MultiSensor Cameras, Johnson Controls TYCO Illustra Flex4 DualSensor Cameras.