CVE-2021-27661

Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervisory Controller (F4-SNC) user an unintended level of access to the controller’s file system, allowing them to access or modify system files by sending specifically crafted web messages to the F4-SNC.

Date published : 2021-07-01

https://us-cert.cisa.gov/ics/advisories/icsa-21-182-01

https://www.johnsoncontrols.com/cyber-solutions/security-advisories