Skip to content
OpenAdvisories
High ICSA-22-125-01 1 CVE

Johnson Controls Metasys

Published May 5, 2022 · Updated May 5, 2022

Vendor: Johnson Controls Product: Metasys ADS/ADX/OAS Servers

Summary

Successful exploitation of this vulnerability could allow an authenticated user to lock other users out of the system and take over their accounts.

Vulnerabilities 1

  • High 8.0
    CVE-2022-21934

    Metasys Unverified Password Change

    Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2.

    Johnson Controls Metasys ADS/ADX/OAS server

Revision history

  1. #1

    ICSA-22-125-01 Johnson Controls Metasys

References