CVE-2022-21939

概要

参考情報

• cisa.gov/uscert/ics/advisories/icsa-23-040-03 · Third Party Advisory
• johnsoncontrols.com/cyber-solutions/security-advisories · Vendor Advisory

metasys system configuration tool のその他の脆弱性

• CVE-2022-21940中 6.1Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 pr…
• CVE-2021-36203緊急 9.1The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request.
• CVE-2020-9044緊急 9.1XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of AS…