CVE-2024-32753 describes a vulnerability in certain cameras, where outdated JQuery versions (prior to 3.5.0) within the camera's third-party components could be exploited. This high-severity vulnerability (CVSS 7.0) can be exploited remotely with low attack complexity, potentially leading to high confidentiality and scope changes if a user interacts with a malicious link. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low immediate threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Johnson Controls | TYCO Illustra Flex4 DualSensor Cameras | >= 0, <= Illustra.SS022.24.03.00.0008CNA affecteddefault unaffected | |
| Johnson Controls | TYCO Illustra Flex4 Fixed & PTZ Cameras | >= 0, <= Illustra.SS018.24.03.00.0010CNA affecteddefault unaffected | |
| Johnson Controls | TYCO Illustra Pro4 Fixed Cameras | >= 0, <= Illustra.SS016.05.03.01.0007CNA affecteddefault unaffected | |
| Johnson Controls | TYCO Illustra Pro4 MultiSensor Cameras | >= 0, <= Illustra.SS017.24.03.00.0009CNA affecteddefault unaffected | |
| Johnson Controls | TYCO Illustra Pro4 PTZ Cameras | >= 0, <= Illustra.SS010.24.03.00.0005CNA affecteddefault unaffected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.
Remediation records are not available for this CVE.