CVE-2024-0912: Johnsoncontrols Software House C-Cure 9000 Siteserver

Medium severity, CVSS 4.2. EPSS: 0.2% chance of exploitation in the next 30 days.

Under certain circumstances the Microsoft® Internet Information Server (IIS) used to host the C•CURE 9000 Web Server will log Microsoft Windows credential details within logs. There is no impact to non-web service interfaces C•CURE 9000 or prior versions

Affected products

Published 2024-06-06. Last modified 2026-06-17.