CVE-2021-27663 | BDVDB-2026-159779 Detail
Johnson ControlsCEM Systems AC2000
Description#
A vulnerability in versions 10.1 through 10.5 of Johnson Controls CEM Systems AC2000 allows a remote attacker to access to the system without adequate authorization. This issue affects: Johnson Controls CEM Systems AC2000 10.1; 10.2; 10.3; 10.4; 10.5.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact low, availability impact none. Attack vector: network.
Weaknesses#
- CWE-285 Improper Authorization
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.