JciCVELIST:CVE-2021-27663CVE-2021-27663 CEM Systems AC2000
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
9.5 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.1%
A vulnerability in versions 10.1 through 10.5 of Johnson Controls CEM Systems AC2000 allows a remote attacker to access to the system without adequate authorization. This issue affects: Johnson Controls CEM Systems AC2000 10.1; 10.2; 10.3; 10.4; 10.5.
CNA Affected
[
{
"product": "CEM Systems AC2000",
"vendor": "Johnson Controls",
"versions": [
{
"lessThanOrEqual": "10.5",
"status": "affected",
"version": "10.1",
"versionType": "custom"
}
]
}
]Related
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
9.5 High
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.1%