Description
Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal (SMP).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnson Controls | Metasys versions prior to 9.0 | — | 9.0 |
Advisories 1
- ICSA-19-227-01 Johnson Controls Metasys CISA ICS & IT advisories · Aug 15, 2019