Skip to content
OpenAdvisories
High ICSA-20-282-01 1 CVE

Johnson Controls Sensormatic Electronics American Dynamics victor Web Client and Software House C•CURE Web Client (Update A)

Published Oct 8, 2020 · Updated Jan 5, 2021 · Revision 2

Vendor: Sensormatic Electronics, LLC, Johnson Controls Product: American Dynamics victor Web Client Product: Software House C•CURE Web Client

Summary

Successful exploitation of this vulnerability could allow a remote unauthenticated attacker to delete arbitrary files on the system or render the system unusable through a denial-of-service attack.

Vulnerabilities 1

  • High 7.1
    CVE-2020-9048

    victor Web Client - Arbitrary File Deletion Vulnerability

    A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files on the system or render the system unusable by conducting a…

    Johnson Controls victor Web Client version 5.4.1 and prior

Revision history

  1. #2

    ICSA-20-282-01 Johnson Controls Sensormatic Electronics American Dynamics victor Web Client and Software House C•CURE Web Client (Update A)

  2. #1

    ICSA-20-282-01 Johnson Controls Sensormatic Electronics American Dynamics victor Web Client

References