Johnson Controls Metasys ADS ADX OAS Servers

🗓️ 14 Jun 2022 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 48 Views

Johnson Controls Metasys ADS ADX OAS Servers vulnerabilit

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® Semeru Runtime	5 Jun 202313:46	–	ibm
ATTACKERKB	CVE-2022-21935	14 Jun 202219:41	–	attackerkb
ATTACKERKB	CVE-2022-21937	14 Jun 202219:41	–	attackerkb
ATTACKERKB	CVE-2022-21938	14 Jun 202219:41	–	attackerkb
BDU FSTEC	The vulnerabilities of the Metasys Application and Data Server (ADS), Metasys Extended Application and Data Server (ADX), and Metasys Open Application Server (OAS) are related to the lack of measures for cleaning incoming data, allowing a perpetrator to execute arbitrary code.	6 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the Metasys Application and Data Server (ADS), Metasys Extended Application and Data Server (ADX), and Metasys Open Application Server (OAS) are related to the lack of measures for cleaning incoming data, allowing a perpetrator to execute arbitrary code.	6 Jul 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Metasys Application and Data Server (ADS), Metasys Extended Application and Data Server (ADX), and Metasys Open Application Server (OAS) lies in the lack of necessary checks during password deletion, allowing attackers to execute arbitrary code.	6 Jul 202200:00	–	bdu_fstec
CNNVD	Johnson Controls Metasys ADS/ADX/OAS Servers 跨站脚本漏洞	14 Jun 202200:00	–	cnnvd
CNNVD	Johnson Controls Metasys ADS/ADX/OAS Servers 跨站脚本漏洞	14 Jun 202200:00	–	cnnvd
CNNVD	Johnson Controls Metasys ADS/ADX/OAS Servers 授权问题漏洞	14 Jun 202200:00	–	cnnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2022/icsa-22-165-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-22-165-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

14 Jun 2022 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 25

CVSS 3.17.5 - 8.7

EPSS0.00541

cvss 8.7 remote exploitable unverified password change cross-site scripting critical manufacturing worldwide deployment patch update cisa guidelines