Johnson Controls C-CURE 9000/victor Plaintext Credential Storage Vulnerability (CVE-2020-9045)

Critical Vulnerability Information 1. Executive Summary CVSS v3: 9.9 Note: Remotely exploitable / Low skill level required for exploitation Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls Products: Software House C-CURE 9000 and American Dynamics victor Video Management System Vulnerability: Storage of Sensitive Information in Plaintext 2. Risk Assessment Successful exploitation of this vulnerability could allow an attacker to access credentials used by the application. 3. Technical Details 3.1 Affected Products Software House C-CURE 9000: Version 2.70 American Dynamics victor Video Management System: Version 5.2 3.2 Vulnerability Overview CWE-312: Storage of Sensitive Information in Plaintext: During installation or upgrade of C-CURE 9000 v2.70 and victor Video Management System v5.2, the credentials of the user performing the installation or upgrade are saved in a file. Installation log files remain after installation. This vulnerability has been assigned CVE-2020-9045, with a CVSS v3 base score of 9.9. 3.3 Background Critical Infrastructure Sectors: Commercial Facilities, Critical Manufacturing, Financial Services, Government Facilities, Healthcare and Public Health, Transportation Systems Deployment Countries/Regions: Global Company Headquarters Location: Ireland 4. Mitigation For Software House C-CURE 9000: Users should upgrade to version 2.80 or later. For American Dynamics victor Video Management System: Users should upgrade to version 5.3. Delete log files located in c:\programdata\tyco\installertemp and change Windows account passwords. For more detailed mitigation guidance, refer to Johnson Controls Product Security Advisory JCI-PSA-2020-4 v1. CISA recommends users implement defensive measures to reduce the risk of exploitation of this vulnerability. Vendor Johnson Controls

Goal Reached Thanks to every supporter — we hit 100%!

Johnson Controls C-CURE 9000/victor Plaintext Credential Storage Vulnerability (CVE-2020-9045)