CVE-2019-7593

CRITICO 9.1CVE-2019-7593 · Published 20/08/2019 · updated 17/06/2026

In breve

CVE-2019-7593 è una vulnerabilità CRITICO (CVSS 9.1) che riguarda metasys system (johnsoncontrols).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.82%, superiore al 57.3% delle vulnerabilità.
Correzione: aggiornare a 9.0 o successiva.

Package	Affected versions	Patched versions
metasys system johnsoncontrols	`< 9.0`	`9.0`

Description

Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal (SMP).

References

johnsoncontrols.com/-/media/jci/cyber-solutions/product-security-advisories/2019/jci-psa-2019-06-v1-metasys-icsa-19-227-01.pdf · Vendor Advisory
us-cert.gov/ics/advisories/icsa-19-227-01 · Mitigation

Altre vulnerabilità di metasys system

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free