Johnson Controls Metasys ADX Server

Risk Summary

Successful exploitation of this vulnerability could allow an Active Directory user to execute validated actions without providing a valid password.

CVEs (1)

Remediations

• Johnson Controls recommends users update Metasys ADX Server version 12.0 running MVE with patch 12.0.1. Users should contact Johnson Controls or Authorized Building Control Specialists (ABCS) for more information.
• For more detailed mitigation instructions, users should see Johnson Controls Product Security Advisory JCI-PSA-2022-11 at the following location:

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing