Description (CNA)
A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files on the system or render the system unusable by conducting a Denial of Service attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Johnson Controls / victor Web Client version 5.4.1 and prior | affected unspecified through 5.4.1 |
CWE
CWE-285
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- https://us-cert.cisa.gov/ics/advisories/icsa-20-282-01
ADP enrichment
No English description supplied.