CVE-2023-4486

Summary (CVE-2023-4486) : Johnson Controls Metasys and Facility Explorer are affected by an Uncontrolled Resource Consumption vulnerability. Under certain circumstances, invalid authentication credentials can be sent to the login endpoint of affected engines to cause denial-of-service. Affected p...

CVE-2021-27661

CVE-2021-27661 affects Johnson Controls Facility Explorer SNC Series Supervisory Controller (F4-SNC), specifically Version 11. The vulnerability is due to improper privilege management (CWE-269) and could allow an authenticated F4-SNC user to gain unintended access to the controller’s file system...