ICS Advisory: Johnson Controls Software House C-CURE 9000

Here is a summary of the provided document:

Summary:

A vulnerability has been identified in the Software House Cu00e2u2014uf18fCURE 9000 security management system, which allows an attacker to access sensitive information in the log file. This vulnerability, rated CVSS v3 7.7, can be exploited by inserting sensitive information into the log file, potentially leading to a denial-of-service (DoS) attack. The affected product version is 3.00.2, and users are advised to update to version 3.00.2 CU02 or 3.00.3 to mitigate the risk. Additionally, users are recommended to change passwords for impacted Windows accounts and delete the api.log log file to prevent exploitation.