CVE-2024-32753

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

Under certain circumstances the camera may be susceptible to known vulnerabilities associated with the JQuery versions prior to 3.5.0 third-party component

Metrics

CVSS 4.0 7.0/10CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected software

VendorProductVersions
Johnson ControlsTYCO Illustra Pro4 Fixed cameras<= Illustra.SS016.05.03.01.0007
Johnson ControlsTYCO Illustra Pro4 PTZ cameras<= Illustra.SS010.24.03.00.0005
Johnson ControlsTYCO Illustra Flex4 Fixed & PTZ cameras<= Illustra.SS018.24.03.00.0010
Johnson ControlsTYCO Illustra Pro4 MultiSensor Cameras<= Illustra.SS017.24.03.00.0009
Johnson ControlsTYCO Illustra Flex4 DualSensor Cameras<= Illustra.SS022.24.03.00.0008
johnsoncontrolsillustra_flex4_dualsensor_firmware<= Illustra.SS022.24.03.00.0008
johnsoncontrolsillustra_pro4_multisensor_firmware<= Illustra.SS017.24.03.00.0009
johnsoncontrolsillustra_flex4_fixed_firmware<= Illustra.SS018.24.03.00.0010
johnsoncontrolsillustra_flex4_ptz_firmware<= Illustra.SS018.24.03.00.0010
johnsoncontrolsillustra_pro4_ptz_firmware<= Illustra.SS010.24.03.00.0005
johnsoncontrolsillustra_pro_gen_4_firmware<= Illustra.SS016.05.03.01.0007

References

Timeline

Published
Jul 11, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-327543.1Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, seriCVE-2024-327559.1Under certain circumstances the web interface will accept characters unrelated to the expected input.CVE-2024-327566.8Under certain circumstances the Linux users credentials may be recovered by an authenticated user.CVE-2024-327576.8Under certain circumstances unnecessary user details are provided within system logsCVE-2024-327587.5Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchangCVE-2024-327597.7Under certain circumstances the Software House C●CURE 9000 installer will utilize weak credentials.CVE-2024-32764.8The Lightbox & Modal Popup WordPress Plugin WordPress plugin before 2.7.28, foobox-image-lightbox-premium WordPress plugin before 2.7.28 doCVE-2024-327606.5When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker prCVE-2024-327616.5Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants running on VELOS and rSeriesCVE-2024-327626.1A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inCVE-2024-327638.8A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-327649.9A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability c
CVE-2024-32753: High severity, CVSS 7.0 | Vulnix