Skip to content
OpenAdvisories
Medium ICSA-22-284-03 1 CVE

Sensormatic Electronics C-CURE 9000

Published Oct 11, 2022 · Updated Oct 11, 2022

Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls Product: C-CURE 9000

Summary

Successful exploitation of this vulnerability could allow an unauthorized user to enumerate user accounts.

Vulnerabilities 1

  • Medium 4.3
    CVE-2021-36201

    CCURE Observable Response Discrepancy

    Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versions.

    Johnson Controls C•CURE 9000

Revision history

  1. #1

    Publication Date

References