Affected: Johnson Controls Kantech EntraPass Security Management Software Special Edition versions 8.22 and prior, Johnson Controls Kantech EntraPass Security Management Software Corporate Edition versions 8.22 and prior, Johnson Controls Kantech EntraPass Security Management Software Global Edition versions 8.22 and prior

A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files.