Description
On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI.
Advisories 1
- ICSA-22-277-01 Johnson Controls Metasys ADX Server CISA ICS & IT advisories · Oct 4, 2022
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- ICS-CERT Advisory third-party-advisory