Vendor
Johnson Controls
113 known vulnerabilities.
Products
EasyIO FS32 7
Metasys ADS/ADX/OAS server 6
Frick Controls Quantum HD 6
exacqVision 6
American Dynamics Illustra Essentials Gen 4 4
iSTAR Configuration Utility (ICU) 4
Metasys 4
IQ Panels2, 2+, IQHub, IQPanel 4, PowerG 3
exacqVision Web Service 3
FM Systems Employee 3
iSTAR Ultra 3
System Configuration Tool (SCT) 2
Kantech Entrapass 2
EasyIO Neo IOManager and Tools Installer 2
Airwall 2
iSTAR Ultra, iSTAR Ultra SE 2
iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 2
Metasys versions prior to 9.0 2
OpenBlue Enterprise Manager Data Collector 2
Software House C•CURE 9000 2
XAAP Application 1
Illustra Standard - L4L China 1
CCure 9000 1
Victor Application Server 1
Kantech EntraPass Security Management Software Special Edition versions 8.22 and prior 1
Kantech EntraPass Security Management Software Corporate Edition versions 8.22 and prior 1
Kantech EntraPass Security Management Software Global Edition versions 8.22 and prior 1
Software House C•CURE 9000 v2.70 1
Metasys 14 1
American Dynamics victor Video Management System v5.2 1
Metasys 15 1
EasyIO FG 1
OpenBlue Workplace (formerly FM Systems) 1
Metasys ADS/ADX/OAS 1
Metasys NAE55/SNE/SNC 1
Facility Explorer F4-SNC 1
CEVAS 1
T2000 1
Metasys Application and Data Server (ADS, ADS-Lite) 1
Metasys Extended Application and Data Server (ADX) 1
3 results · Clear filters · Feed
-
Low 2.9
TL280
Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63.
-
Low 2.3
Johnson Controls PowerG and IQPanel cleartext transmission of sensitive information
Under certain circumstances, attacker can capture the network key, read or write encrypted packets on the PowerG network.
-
Low 3.1
Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information
Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information.