CVE-2020-9046: Johnsoncontrols Kantech Entrapass

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability in all versions of Kantech EntraPass Editions could potentially allow an authorized low-privileged user to gain full system-level privileges by replacing critical files with specifically crafted files.

Affected products

• Johnsoncontrols Kantech Entrapass: up to and including 8.22

Published 2020-05-26. Last modified 2026-06-17.