Description
A vulnerability in versions 10.1 through 10.5 of Johnson Controls CEM Systems AC2000 allows a remote attacker to access to the system without adequate authorization. This issue affects: Johnson Controls CEM Systems AC2000 10.1; 10.2; 10.3; 10.4; 10.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnson Controls | CEM Systems AC2000 | 10.1 – ≤ 10.5 | — |
Advisories 1
- ICSA-21-238-01 Johnson Controls Controlled Electronic Management Systems CEM Systems AC2000 CISA ICS & IT advisories · Aug 26, 2021
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- ICS-CERT Advisory third-party-advisory