Vulnerability Details CVE-2021-27663
A vulnerability in versions 10.1 through 10.5 of Johnson Controls CEM Systems AC2000 allows a remote attacker to access to the system without adequate authorization. This issue affects: Johnson Controls CEM Systems AC2000 10.1; 10.2; 10.3; 10.4; 10.5.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.7%
CVSS Severity
CVSS v3 Score 8.2
CVSS v2 Score 9.3
References
Products affected by CVE-2021-27663
-
cpe:2.3:h:johnsoncontrols:ac2000:-
-
cpe:2.3:o:johnsoncontrols:ac2000_firmware:*