✕
Request a Demo
Rewterz
Rewterz Threat Advisory –CVE-2021-29744 – IBM Maximo Asset Management Vulnerability
August 29, 2021
Rewterz
Rewterz Threat Advisory – CVE-2021-23434 – Node.js Object-Path Module Vulnerability
August 30, 2021

Rewterz Threat Advisory – ICS – Johnson Controls Controlled Electronic Management Systems CEM Systems AC2000

Severity

High

Analysis Summary

CVE-2021-27663

Johnson Controls Controlled Electronic Management Systems CEM Systems AC2000 could allow a remote attacker to bypass security restrictions, caused by the failure to perform an adequate authorization check for functionality that requires a provable user identity. By sending a specially crafted request, an attacker could exploit this vulnerability to bypass access restrictions.

Impact

  • Security Bypass
  • Unauthorized Access

Affected Vendors

Johnson Controls

Affected Products

  • Johnson Controls Controlled Electronic Management Systems CEM Systems AC2000 10.1
  • Johnson Controls Controlled Electronic Management Systems CEM Systems AC2000 10.5

Remediation

Refer to Johnson Controls JCI-PSA-2021-15 for patch, upgrade or suggested workaround information.

https://www.johnsoncontrols.com/-/media/jci/cyber-solutions/product-security-advisories/2021/jci-psa-2021-15-final.pdf?la=en&hash=D60CF12F8B88D8A1BCA09F45AFDBCE503624DAF1