Vendors / Johnson Control Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Johnson Control records in CISA KEV No Johnson Control vulnerabilities are listed in CISA KEV.
Priority MEDIUM 45
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00289 · Published 2025-12-17 · No fix listed CWE-78
Priority MEDIUM 40
Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and Johnson Controls Victor Application Server allows capec-586.
CVSS 4.0 HIGH 8.7· Adjacent network · No auth · No interaction · EPSS 0.00492 · Published 2026-07-23 · Fixed in 8.0, 3.2 +1 CWE-502
Open these records in search → All records by CVSS severity
0 2 0 0 0
