Description
The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnnson Controls | Metasys System Configuration Tool (SCT) | All – < 14.2.2 | 14.2.2 |
| Johnnson Controls | Metasys System Configuration Tool Pro (SCT Pro) | All – < 14.2.2 | 14.2.2 |
Advisories 1
- ICSA-22-111-02 Johnson Controls Metasys SCT Pro CISA ICS & IT advisories · Apr 21, 2022