From Cybersecurity and Infrastructure Security Agency ↗
Successful exploitation of these vulnerabilities could allow an attacker with network access to achieve remote code execution.
The following versions of Johnson Controls C-CURE 9000 and Victor application server are affected:
C-CURE 9000 and victor