Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-71455 1 Johnsoncontrols 1 Kantech Entrapass 2026-10-26 N/A
Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrapass: before 9.20.
CVE-2026-71456 1 Johnsoncontrols 1 Kantech Entrapass 2026-10-26 N/A
Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech Entrapass: before 9.20.
CVE-2021-36198 1 Johnsoncontrols 1 Kantech Entrapass 2024-11-21 8.3 High
Successful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.
CVE-2020-9046 1 Johnsoncontrols 1 Kantech Entrapass 2024-11-21 8.8 High
A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files.