Description (CNA)
A vulnerability in versions 10.1 through 10.5 of Johnson Controls CEM Systems AC2000 allows a remote attacker to access to the system without adequate authorization. This issue affects: Johnson Controls CEM Systems AC2000 10.1; 10.2; 10.3; 10.4; 10.5.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Johnson Controls / CEM Systems AC2000 | affected 10.1 through 10.5 |
CWE
CWE-285
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- https://us-cert.gov/ics/advisories/ICSA-21-238-01
ADP enrichment
No English description supplied.