Lucene search
JciCVE-2021-36201HistoryOct 11, 2022 - 9:15 p.m.
CVE-2021-36201
2022-10-1121:15:12
CWE-204
CWE-203
jci
web.nvd.nist.gov
40
4
information security
ccure portal
user accounts
enumeration
cve-2021-36201
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
32.2%
Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versions.
Affected configurations
Node
johnsoncontrolsc-cure_9000Match-
johnsoncontrolsc-cure_9000_firmwareRange≤2.90
| Vendor | Product | Version | CPE |
|---|---|---|---|
| johnsoncontrols | c-cure_9000 | - | cpe:2.3:h:johnsoncontrols:c-cure_9000:-:*:*:*:*:*:*:* |
| johnsoncontrols | c-cure_9000_firmware | * | cpe:2.3:o:johnsoncontrols:c-cure_9000_firmware:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Johnson Controls",
"product": "C•CURE 9000",
"versions": [
{
"version": "2.90 and ealier",
"status": "affected",
"lessThanOrEqual": "2.90",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
cvelist
cvelist
CVE-2021-36201 CCURE Observable Response Discrepancy
2022-10-11 20:17:42
prion
prion
Code injection
2022-10-11 21:15:00
ics
ics
Sensormatic Electronics C-CURE 9000
2022-10-11 12:00:00
nvd
nvd
CVE-2021-36201
2022-10-11 21:15:12
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
32.2%
Related for CVE-2021-36201