CVE-2019-7589

A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraPass Corporate Edition versions 8.0 and prior; Kantech EntraPass Global Edition versions 8.0 and prior.

• CWE-20
• CWE-20

• https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-070-04Third Party Advisory, US Government Resource
• https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesVendor Advisory
• https://www.us-cert.gov/ics/advisories/icsa-20-070-04Third Party Advisory, US Government Resource

Published

Mar 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7580ThinkCMF 5.0.190111 allows remote attackers to execute arbit…
• CVE-2019-7581The parseSWF_ACTIONRECORD function in util/parser.c in libmi…
• CVE-2019-7582The readBytes function in util/read.c in libming through 0.4…
• CVE-2019-7585An issue was discovered in Waimai Super Cms 20150505. web/Li…
• CVE-2019-7587Bo-blog Wind through 1.6.0-r allows SQL Injection via the ad…
• CVE-2019-7588A vulnerability in the exacqVision Enterprise System Manager…6.7
• CVE-2019-7590ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcps…6.7
• CVE-2019-7593Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.…6.8
• CVE-2019-7594Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.…6.8
• CVE-2019-7608Kibana versions before 5.6.15 and 6.6.1 had a cross-site scr…
• CVE-2019-7609Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary…10
• CVE-2019-7610Kibana versions before 6.6.1 contain an arbitrary code execu…