CVE-2024-32759 HIGH

CVE-2024-32759: Johnson Controls Software House C●CURE 9000 installer password strength

Vendor Johnson Controls
Product Software House C•CURE 9000
Weakness CWE-1391
Published July 10, 2024
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

7.7/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Under certain circumstances the Software House C●CURE 9000 installer will utilize weak credentials.

Key dates

02Disclosure timeline

July 10, 2024 CVE published
August 2, 2024 Record updated