CVE-2020-9048: Johnsoncontrols Victor Web Client

High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days.

A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files on the system or render the system unusable by conducting a Denial of Service attack.

Affected products

• Johnsoncontrols Victor Web Client: up to and including 5.4.1
• Tyco C-Cure Web Client: up to and including 2.80

Published 2020-10-08. Last modified 2026-06-17.