Known vulnerabilities in CEM Systems AC2000

Vendor: Johnson Controls
Software: CEM Systems AC2000
Software CPE: cpe:2.3:a:johnson_controls:cem_systems_ac2000:*:*:*:*:*:*:*:*
Website: https://www.johnsoncontrols.com/
Total vulnerabilities: 2
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CEM Systems AC2000 CEM Systems AC2000 is affected by 2 known vulnerabilities: 1 high, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56123 - Improper Authorization
CVE-2021-27663		 CWE-285 High
No
No
 10.6 27.08.2021 SB2021082702
#VU50040 - Heap-based Buffer Overflow
CVE-2021-3156		 CWE-122 Low
Available
Exploited
 10.6 26.01.2021 SB2021012632
SB2021012633
SB2021012634
and 55 more