Critical severity9.9NVD Advisory· Published May 21, 2020· Updated Jun 17, 2026

CVE-2020-9045

Description

During installation or upgrade to Software House C•CURE 9000 v2.70 and American Dynamics victor Video Management System v5.2, the credentials of the user used to perform the installation or upgrade are logged in a file. The install log file persists after the installation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tyco/Victor Video Management System
cpe:2.3:a:tyco:victor_video_management_system:5.2:*:*:*:*:*:*:*
Johnsoncontrols/C Cure 9000 Firmware
cpe:2.3:o:johnsoncontrols:c-cure_9000_firmware:2.70:*:*:*:*:*:*:*
Software House/C•CURE 9000llm-create
Range: 2.70
American Dynamics/victor Video Management Systemllm-create
Range: 5.2
Johnson Controls/victor Video Management Systemllm-create
Range: 5.2
Johnson Controls/C●CURE 9000llm-fuzzy
Range: 2.70
Johnson Controls/American Dynamics victor Video Management System v5.2v5
Range: 5.2
Johnson Controls/Software House C•CURE 9000cpe-rescue
Range: 2.70

Patches

Vulnerability mechanics

References

www.johnsoncontrols.com/cyber-solutions/security-advisoriesnvdPatchVendor Advisory
www.us-cert.gov/ics/advisories/ICSA-20-142-01nvdThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000