Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to versions 11.0.6 and 12.0.4 and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HJohnsoncontrols F4 Snc
HWJohnsoncontrolsall versionsJohnsoncontrols F4 Snc Firmware
OSJohnsoncontrols< 11.0.612.0.0 – 12.0.4 (excl.)Johnsoncontrols Nae55
HWJohnsoncontrolsall versionsJohnsoncontrols Nae55 Firmware
OSJohnsoncontrols< 12.0.4Johnsoncontrols Snc16120 0
HWJohnsoncontrolsall versionsJohnsoncontrols Snc16120 04
HWJohnsoncontrolsall versionsJohnsoncontrols Snc16120 04 Firmware
OSJohnsoncontrols< 12.0.4Johnsoncontrols Snc16120 0 Firmware
OSJohnsoncontrols< 12.0.4Johnsoncontrols Snc25150 0
HWJohnsoncontrolsall versionsJohnsoncontrols Snc25150 04
HWJohnsoncontrolsall versionsJohnsoncontrols Snc25150 04 Firmware
OSJohnsoncontrols< 12.0.4Johnsoncontrols Snc25150 0 Firmware
OSJohnsoncontrols< 12.0.4Johnsoncontrols Sne10500
HWJohnsoncontrolsall versionsJohnsoncontrols Sne10500 Firmware
OSJohnsoncontrols< 12.0.4Johnsoncontrols Sne11000
HWJohnsoncontrolsall versionsJohnsoncontrols Sne11000 Firmware
OSJohnsoncontrols< 12.0.4Johnsoncontrols Sne110l0
HWJohnsoncontrolsall versionsJohnsoncontrols Sne110l0 Firmware
OSJohnsoncontrols< 12.0.4Johnsoncontrols Sne22000
HWJohnsoncontrolsall versionsJohnsoncontrols Sne22000 Firmware
OSJohnsoncontrols< 12.0.4
Related vulnerabilities
Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervi...
XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate D...
Niewystarczająca długość klucza kryptograficznego w komunikacji exacqVision
Niezamierzone ujawnienie funkcji debug w Johnson Controls Quantum HD Unity
Pominięcie uwierzytelnienia w Johnson Controls OpenBlue Enterprise Manager Data Collector