Description
Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versions.
Scores
CVSS v3
4.3
EPSS
0.0012
EPSS Percentile
30.9%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-204
CWE-203
Status
published
Products (1)
johnsoncontrols/c-cure_9000_firmware
< 2.90
Published
Oct 11, 2022
Tracked Since
Feb 18, 2026