Skip to content
OpenAdvisories
High ICSA-21-159-01 1 CVE

Johnson Controls Metasys

Published Jun 8, 2021 · Updated Jun 8, 2021

Vendor: Johnson Controls Product: Metasys

Summary

Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system.

Vulnerabilities 1

  • High 8.8
    CVE-2021-27657

    Metasys Improper Privilege Management

    Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system. …

    Johnson Controls Metasys

Revision history

  1. #1

    ICSA-21-159-01 Johnson Controls Metasys

References