CVE-2022-21936

概要

参考情報

• cisa.gov/uscert/ics/advisories/icsa-22-277-01 · Third Party Advisory
• johnsoncontrols.com/cyber-solutions/security-advisories · Vendor Advisory

metasys extended application and data server のその他の脆弱性

• CVE-2021-36204高 7.5Under some circumstances an Insufficiently Protected Credentials vulnerability in Johnson Controls Metasys ADS/ADX/OAS 10 versions prior to …
• CVE-2021-36200中 5.3Under certain circumstances an unauthenticated user could access the the web API for Metasys ADS/ADX/OAS 10 versions prior to 10.1.6 and 11 …
• CVE-2022-21938中 5.4Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to…
• CVE-2022-21937中 5.4Under certain circumstances, a vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to…
• CVE-2022-21935高 7.5A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified pas…