CVE-2021-36198

HIGH

Johnsoncontrols Johnson Controls Kantech EntraPass <= 8.40 - Information Disclosure

Title source: llm

Successful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.

Core 2

Core References

Vendor Advisory x_refsource_confirm

Mitigation, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert

CVSS v3 8.3

EPSS 0.0108

EPSS Percentile 60.6%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

CWE

CWE-200 CWE-668

Status published

Products (1)

johnsoncontrols/kantech_entrapass < 8.40

Published Dec 06, 2021

Tracked Since Feb 18, 2026