Johnson Controls Inc. Software House C●CURE 9000

Risk Summary

Successful exploitations of this vulnerability could allow an attacker to gain administrative access

CVEs (1)

Remediations

• Johnson Controls Inc. recommends the following:
• Update Software House C●CURE 9000 to at least version 2.90
• For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2024-12 v1 at the following location: https://www.johnsoncontrols.com/cyber-solutions/security-advisories
• Aligning with CISA recommendations, Johnson Controls recommends taking steps to minimize risks to all building automation systems.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing, Commercial Facilities, Government Facilities, Transportation Systems, Energy