Johnson Controls Update
3200Warning Date
Severity Level
Warning Number
Target Sector
25 May, 2020
● Critical
2020-1276
Transportation - Finance and Economy - HealthCare - Manufacturing - Commercial Facilities - Government Facilities
Description:
Johnson Controls has released security update to address a vulnerability in the following products:
- Software House C•CURE 9000
- Version 2.70
- American Dynamics victor Video Management System
- Version 5.2
Threats:
The vulnerability allows the credentials of the user performing the installation or upgrade are saved in a file.
Best practice and Recommendations:
The CERT team encourages users to review Johnson Controls security advisory and apply the necessary updates: