Johnson Controls System Configuration Tool (SCT)

Risk Summary

Successful exploitation of these vulnerabilities could allow an attacker to access cookies and take over the user's session.

CVEs (2)

Remediations

• Johnson Controls recommends users take the following actions to mitigate the vulnerabilities.
• Update SCT version 14 with patch 14.2.3
• Update SCT version 15 with patch 15.0.3
• Contact your local Johnson Controls office or Authorized Building Control Specialists (ABCS)
• For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2022-07 v1

Affected Vendors

Affected Products (2)

Affected Sectors

Critical Manufacturing