Skip to content
OpenAdvisories
High 1 exploited CVE ICSA-21-334-04 1 CVE

Johnson Controls CEM Systems AC2000

Published Nov 30, 2021 · Updated Nov 30, 2021

Vendor: Contolled Electronic Management Systems Ltd, Johnson Contols Product: CEM Systems AC2000

Summary

Successful exploitation of this vulnerability could allow a local attacker to obtain super user access on the underlying Linux operating system.

Vulnerabilities 1

  • High 7.8
    CVE-2021-3156 Exploited Public exploit EPSS 100%

    Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…

    sudo sudo sudo Debian Ubuntu Alpine
    KEV Apr 6, 2022

Revision history

  1. #1

    ICSA-21-334-04 Johnson Controls CEM Systems AC2000

References