CVE-2022-21935

🗓️ 15 Jun 2022 19:57:01Reported by jciType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 101 Views

A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-21935	14 Jun 202219:41	–	attackerkb
BDU FSTEC	The vulnerability of the Metasys Application and Data Server (ADS), Metasys Extended Application and Data Server (ADX), and Metasys Open Application Server (OAS) lies in the lack of necessary checks during password deletion, allowing attackers to execute arbitrary code.	6 Jul 202200:00	–	bdu_fstec
CNNVD	Johnson Controls Metasys ADS/ADX/OAS Servers 授权问题漏洞	14 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-21935 Metasys password guessing	15 Jun 202219:57	–	cvelist
EUVD	EUVD-2022-27091	3 Oct 202520:07	–	euvd
ICS	Johnson Controls Metasys ADS ADX OAS Servers	14 Jun 202200:00	–	ics
NVD	CVE-2022-21935	15 Jun 202220:15	–	nvd
OSV	CVE-2022-21935	15 Jun 202220:15	–	osv
Prion	Default credentials	15 Jun 202220:15	–	prion

NVD

Node

johnsoncontrols metasys_application_and_data_serverRange10.0–10.1.5

johnsoncontrols metasys_application_and_data_serverMatch11.0

johnsoncontrols metasys_application_and_data_serverMatch11.0.1

johnsoncontrols metasys_extended_application_and_data_serverRange10.0–10.1.5

johnsoncontrols metasys_extended_application_and_data_serverMatch11.0

johnsoncontrols metasys_extended_application_and_data_serverMatch11.0.1

johnsoncontrols metasys_open_application_serverRange10.0–10.1.5

johnsoncontrols metasys_open_application_serverMatch11.0

johnsoncontrols metasys_open_application_serverMatch11.0.1

[
  {
    "product": "Metasys ADS/ADX/OAS server",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "10.1.5",
        "status": "affected",
        "version": "All 10 versions",
        "versionType": "custom"
      },
      {
        "lessThan": "11.0.2",
        "status": "affected",
        "version": "All 11 versions",
        "versionType": "custom"
      }
    ]
  }
]