Read the docs

Johnson Controls

Records126All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical25CVSS 9.0–10.0
CVSS high65CVSS 7.0–8.9

Exploited now

Johnson Controls records in CISA KEV

No Johnson Controls vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Metasys Extended Application And Data Server 11 records MEDIUM Metasys Application And Data Server 10 records MEDIUM Metasys Open Application Server 10 records MEDIUM Exacqvision Web Service 8 records MEDIUM Frick Controls Quantum Hd Firmware 6 records MEDIUM Exacqvision Server 4 records MEDIUM Metasys System Configuration Tool 4 records MEDIUM C-cure 9000 Firmware 3 records MEDIUM

Records

3 records in C-cure 9000 Firmware · all components

TI-2020-07261 CVE-2020-9045 · GHSA-389j-cw3h-6fc8

Cleartext storage of sensitive information in Johnson Controls Software House C•CURE 9000…

Priority MEDIUM 44

During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0099 Published 2020-05-21 No fix listed CWE-312
TI-2021-09108 CVE-2021-27660 · GHSA-2cfq-h45g-8h84

Improper input validation in Johnson Controls C-CURE 9000

Priority MEDIUM 42

An insecure client auto update feature in C-CURE 9000 can allow remote execution of lower privileged Windows programs.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02096 Published 2021-07-01 Fixed in 2.80 CWE-20
TI-2021-14617 CVE-2021-36201 · GHSA-r78m-94wm-v7cv

CCURE Observable Response Discrepancy

Priority LOW 25

Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versions.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00648 Published 2022-10-11 No fix listed CWE-204
Open these records in search →