Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-36201 Details

Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versions.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.3 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CNA: [email protected]CVSS-B:4.3 MEDIUMVector:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-03	CVE	Third Party AdvisoryUS Government Resource
https://www.johnsoncontrols.com/cyber-solutions/security-advisories	CVE	Vendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-03	[email protected]	Third Party AdvisoryUS Government Resource
https://www.johnsoncontrols.com/cyber-solutions/security-advisories	[email protected]	Vendor Advisory

CWE-ID	CWE Name	Source
CWE-203	Observable Discrepancy	[email protected]
CWE-204	Observable Response Discrepancy	[email protected]

Product	Versions
johnsoncontrols c-cure 9000 firmware	<= 2.90
CPE cpe:2.3:o:johnsoncontrols:c-cure_9000_firmware:::::::: Remediation No remediation found in references.
johnsoncontrols c-cure 9000	All versions
CPE cpe:2.3:h:johnsoncontrols:c-cure_9000:-:::::::* Remediation No remediation found in references.

7 change records found show changes

QUICK INFO