Vendor: Johnson Controls. Maximum CVSS v3.1 9.6 Critical.
Also from Johnson Controls: 3 advisories
Loading the full advisory.
Vulnerabilities
ICSA-26-204-01
Review this Cybersecurity and Infrastructure Security Agency (CISA) advisory's affected products, published severity, and mitigations.
Johnson Controls C-CURE 9000 and Victor application server (Update A)
Operational technology advisory