Description (CNA)
Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal (SMP).
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Johnson Controls / Metasys versions prior to 9.0 | unaffected 9.0 |
CWE
CWE-321
References
- https://www.johnsoncontrols.com/-/media/jci/cyber-solutions/product-security-advisories/2019/jci-psa-2019-06-v1-metasys-icsa-19-227-01.pdf
- https://www.us-cert.gov/ics/advisories/icsa-19-227-01
ADP enrichment
No English description supplied.