CVE-2023-3749

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A local user could edit the VideoEdge configuration file and interfere with VideoEdge operation.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-349 CWE-345

Affected software

Vendor	Product	Versions
Sensormatic Electronics, a subsidiary of Johnson Controls, Inc.	VideoEdge	< 6.1.1

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-215-04Third Party Advisory, US Government Resource
https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesVendor Advisory
https://www.cisa.gov/news-events/ics-advisories/icsa-23-215-04Third Party Advisory, US Government Resource
https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesVendor Advisory

Timeline

Published: Aug 3, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-374909.0SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file crea CVE-2023-374918.8The ACL (Access Control List) of SAP Message Server - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, RNL64UC 7.22, RNL64UC 7.2 CVE-2023-374926.5SAP NetWeaver Application Server ABAP and ABAP Platform - versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740 CVE-2023-374955.9Internet passwords stored in Person documents in the Domino® Directory created using the "Add Person" action on the People & Groups tab in t CVE-2023-374965.4HCL Verse is susceptible to a Stored Cross Site Scripting (XSS) vulnerability. An attacker could execute script in a victim's web browser t CVE-2023-374978.8The Unica application exposes an API which accepts arbitrary XML input. By manipulating the given XML, an authenticated attacker with certai CVE-2023-374988.8A user is capable of assigning him/herself to arbitrary groups by reusing a POST request issued by an administrator. It is possible that an CVE-2023-374996.1A Persistent Cross-site Scripting (XSS) vulnerability can be carried out in a certain field of the Unica Platform. An attacker could hijack CVE-2023-37505.3A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race conditi CVE-2023-375006.1A Persistent Cross-site Scripting (XSS) vulnerability can be carried out on certain pages of Unica Platform. An attacker could hijack a use CVE-2023-375016.1A Persistent XSS vulnerability can be carried out in a certain field of Unica Campaign. An attacker could hijack a user's session and perfo CVE-2023-375028.8HCL Compass is vulnerable to lack of file upload security. An attacker could upload files containing active code that can be executed by th