Johnson Controls Metasys

1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: Johnson Controls Equipment: Metasys Vulnerabilities: Reusing a Nonce, Key Pair in Encryption; Use of Hard-coded Cryptographic Key 2. RISK EVALUATION Successful exploitation of these vulnerabilities could be leveraged by an...

Johnson Controls MS-NAE5521-3E Metasys NAE Controller

Binary data 764897.prm...

Johnson Controls MS-NCE2500-0 Metasys NCE Controller

Binary data 764896.prm...

Johnson Controls MS-NAE5511-3E Metasys NAE Controller

Binary data 764900.prm...

Johnson Controls MS-NAE3524-2 Metasys NAE Controller

Binary data 764904.prm...

Johnson Controls MS-NAE4520-2 Metasys NAE Controller

Binary data 764902.prm...

Johnson Controls MS-NCE2516-0 Metasys NCE Controller

Binary data 764893.prm...

Johnson Controls MS-NAE5520-3E Metasys NAE Controller

Binary data 764899.prm...

Johnson Controls MS-NCE2506-0 Metasys NCE Controller

Binary data 764895.prm...

Johnson Controls MS-NAE4510-2 Metasys NAE Controller

Binary data 764903.prm...

Johnson Controls MS-NCE2560-0 Metasys NCE Controller

Binary data 764890.prm...

Johnson Controls MS-NAE5510-3E Metasys NAE Controller

Binary data 764901.prm...

Johnson Controls MS-NAE3514-2 Metasys NAE Controller

Binary data 764906.prm...

Johnson Controls MS-NAE3520-2 Metasys NAE Controller

Binary data 764905.prm...

Johnson Controls MS-NAE3510-2 Metasys NAE Controller

Binary data 764907.prm...

Johnson Controls MS-NAE5520-3E Metasys NAE Controller

Binary data 764898.prm...

Johnson Controls MS-NCE2510-0 Metasys NCE Controller

Binary data 764894.prm...

Johnson Controls MS-NCE2526-0 Metasys NCE Controller

Binary data 764891.prm...

Johnson Controls exacqVision Server

1. EXECUTIVE SUMMARY CVSS v3 6.7 Vendor : Exacq Technologies, Inc., a subsidiary of Johnson Controls Equipment : exacqVision Server Vulnerability : Unquoted Search Path or Element 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an unauthenticated user to elevate their...

Feds: Cyberattack on NASA's JPL Threatened Mission-Control Data

NASA’s Jet Propulsion Laboratory JPL may know how to send delicate equipment to Mars, but basic cybersecurity best practices appear to pose an issue for it. A comprehensive federal review has detailed an April 2018 security incident that compromised mission systems – stemming from multiple IT...