CVE-2021-27663CWE-285

CEM Systems AC2000

High · published August 30, 2021

CVSS v3.1
8.2
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

A vulnerability in versions 10.1 through 10.5 of Johnson Controls CEM Systems AC2000 allows a remote attacker to access to the system without adequate authorization. This issue affects: Johnson Controls CEM Systems AC2000 10.1; 10.2; 10.3; 10.4; 10.5.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01669 · 76.6th percentile
Weakness
CWE-285 · Improper Authorization
Published
2021-08-30T16:37Z
EPSS history
Timeline
  • 30 AUG 16:37Z
    CEM Systems AC2000
    cvelistv5