CVE-2024-32753

Summary

Under certain circumstances the camera may be susceptible to known vulnerabilities associated with the JQuery versions prior to 3.5.0 third-party component

Affected Software

VendorProductVersion RangeStatus
Johnson ControlsTYCO Illustra Pro4 Fixed cameras0 <= Illustra.SS016.05.03.01.0007affected
Johnson ControlsTYCO Illustra Pro4 PTZ cameras0 <= Illustra.SS010.24.03.00.0005affected
Johnson ControlsTYCO Illustra Flex4 Fixed & PTZ cameras0 <= Illustra.SS018.24.03.00.0010affected
Johnson ControlsTYCO Illustra Pro4 MultiSensor Cameras0 <= Illustra.SS017.24.03.00.0009affected
Johnson ControlsTYCO Illustra Flex4 DualSensor Cameras0 <= Illustra.SS022.24.03.00.0008affected

Weaknesses

  • CWE-1395: CWE-1395: Dependency on Vulnerable Third-Party Component

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

CVE Program Container

Additional References

References