Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-27660

C-CURE 9000

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jci

Description

An insecure client auto update feature in C-CURE 9000 can allow remote execution of lower privileged Windows programs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Controls C-CURE 9000

  • All versions of C-CURE 9000 prior to 2.80 to < 2.80affected

References