Description (CNA)
Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to versions 11.0.6 and 12.0.4 and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Johnson Controls / Metasys NAE55/SNE/SNC | affected 12.0 before 12.0.4; affected 11.0 before 11.0.6 |
| Johnson Controls / Facility Explorer F4-SNC | affected 12.0 before 12.0.4; affected 11.0 before 11.0.6 |
CWE
CWE-400
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-341-03
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.