Medium ICSA-19-022-01 1 CVE

Johnson Controls Facility Explorer

Published Jan 22, 2019 · Updated Jan 22, 2019

Vendor: Johnson Controls Product: Facility Explorer

Summary

Successful exploitation of these vulnerabilities could allow an attacker to read, write, and delete sensitive files to gain administrator privileges in the Facility Explorer system.

Vulnerabilities 1

Unscored —

CVE-2017-16744 Public exploit

A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prio…

ICS-CERT Niagara AX Framework and Niagara 4 Framework

Aug 20, 2018

Revision history

2019-01-22 #1
ICSA-19-022-01 Johnson Controls Facility Explorer

References

ICS Advisory ICSA-19-022-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-19-022-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B