{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T16:12:42.204","vulnerabilities":[{"cve":{"id":"CVE-2020-9045","sourceIdentifier":"productsecurity@jci.com","published":"2020-05-21T15:15:10.013","lastModified":"2026-06-17T03:27:23.877","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation."},{"lang":"es","value":"Durante la instalación o actualización del Software House C-CURE 9000 versión v2.70 y American Dynamics victor Video Management System versión v5.2, las credenciales del usuario usadas para llevar a cabo la instalación o actualización son registradas en un archivo. El archivo de registro de instalación persiste después de la instalación."}],"affected":[{"source":"productsecurity@jci.com","affectedData":[{"vendor":"Johnson Controls","product":"Software House C•CURE 9000 v2.70","versions":[{"version":"2.70","status":"affected"}]},{"vendor":"Johnson Controls","product":"American Dynamics victor Video Management System v5.2","versions":[{"version":"5.2","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"productsecurity@jci.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","baseScore":9.9,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.1,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"productsecurity@jci.com","type":"Secondary","description":[{"lang":"en","value":"CWE-312"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-312"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tyco:victor_video_management_system:5.2:*:*:*:*:*:*:*","matchCriteriaId":"EEB8E462-891E-4774-AC44-11A7649596BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:johnsoncontrols:c-cure_9000_firmware:2.70:*:*:*:*:*:*:*","matchCriteriaId":"3170F44C-A69B-4727-A04E-D3A041C95634"}]}]}],"references":[{"url":"https://www.johnsoncontrols.com/cyber-solutions/security-advisories","source":"productsecurity@jci.com","tags":["Patch","Vendor Advisory"]},{"url":"https://www.us-cert.gov/ics/advisories/ICSA-20-142-01","source":"productsecurity@jci.com","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://www.johnsoncontrols.com/cyber-solutions/security-advisories","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://www.us-cert.gov/ics/advisories/ICSA-20-142-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"]}]}}]}