Johnson Controls AC2000 Uncontrolled Search Path Element Vulnerability

An uncontrolled search path element vulnerability has been identified in Johnson Controls AC2000 software on Windows. This vulnerability allows manipulation of configuration file search paths, potentially leading to unauthorized access or execution of files. It affects AC2000 versions 10.6 prior to 10, 11.0 prior to 9, and 12 prior to 3.

Impact

Exploitation of this vulnerability could lead to unauthorized manipulation of configuration file search paths, potentially allowing for the execution of malicious files or commands.