High severity7.1NVD Advisory· Published Oct 8, 2020· Updated Jun 17, 2026

CVE-2020-9048

Description

A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files on the system or render the system unusable by conducting a Denial of Service attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Johnsoncontrols/Victor Web Client
cpe:2.3:a:johnsoncontrols:victor_web_client:*:*:*:*:*:*:*:*
Range: <=5.4.1
Tyco/C Cure Web Client
cpe:2.3:a:tyco:c-cure_web_client:*:*:*:*:*:*:*:*
Range: <=2.80
American Dynamics/victor Web Clientllm-create
Software House/C•CURE Web Clientllm-create
Johnson Controls/CCURE Web Clientllm-create
Johnson Controls/victor Web Client version 5.4.1 and priorv5
Range: unspecified

Patches

Vulnerability mechanics

References

www.johnsoncontrols.com/cyber-solutions/security-advisoriesnvdPatchThird Party Advisory
us-cert.cisa.gov/ics/advisories/icsa-20-282-01nvdMitigationThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000