CVE-2022-21939

Mô tả

Tham khảo

• cisa.gov/uscert/ics/advisories/icsa-23-040-03 · Third Party Advisory
• johnsoncontrols.com/cyber-solutions/security-advisories · Vendor Advisory

Lỗ hổng khác của metasys system configuration tool

• CVE-2022-21940TRUNG BÌNH 6.1Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in Johnson Controls System Configuration Tool (SCT) version 14 pr…
• CVE-2021-36203NGHIÊM TRỌNG 9.1The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request.
• CVE-2020-9044NGHIÊM TRỌNG 9.1XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of AS…