Vulnerability Details CVE-2021-27660
An insecure client auto update feature in C-CURE 9000 can allow remote execution of lower privileged Windows programs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.5%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
Products affected by CVE-2021-27660
-
cpe:2.3:h:johnsoncontrols:c-cure_9000:-
-
cpe:2.3:o:johnsoncontrols:c-cure_9000_firmware:-
-
cpe:2.3:o:johnsoncontrols:c-cure_9000_firmware:2.70