← CVE Intelligence

CVE-2021-36203

Johnson Controls Metasys SCT Pro PUBLISHED

Description (CNA)

The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request.

Affected (CNA)

Vendor / productVersions
Johnnson Controls / Metasys System Configuration Tool (SCT)affected All before 14.2.2
Johnnson Controls / Metasys System Configuration Tool Pro (SCT Pro)affected All before 14.2.2

CWE

CWE-918

References

ADP enrichment

CVE

No English description supplied.