Skip to content
OpenAdvisories
Medium · 6.8 CVE-2019-7593 EUVD-2019-17131GHSA-47h2-cvf5-94gh

Metasys use of shared RSA key pairs

Published Aug 20, 2019 · Updated Aug 4, 2024 · Assigned by jci

Description

Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal (SMP).

Affected products

VendorProductAffectedFixed
Johnson Controls Metasys versions prior to 9.0 — 9.0

Advisories 1

References