Lucene search

K

Metasys System Security Vulnerabilities

cve

In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information.

6.5CVSS

6.2AI Score

0.001EPSS

2018-08-01 09:29 PM

37

cve

Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal (SMP).

9.1CVSS

9.1AI Score

0.001EPSS

2019-08-20 07:15 PM

35

cve

Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal (SMP).

9.1CVSS

9.1AI Score

0.001EPSS

2019-08-20 07:15 PM

28