PT-2021-17585
CVE-2021-27657
·
تاريخ النشر
2021-06-04
·
تاريخ التحديث
2021-12-02
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Johnson Controls Metasys versions prior to 11.0
Description
The issue allows an authenticated Metasys user to gain unintended access to the server file system. This can be achieved by sending specifically crafted web messages to the Metasys system, potentially enabling the user to access or modify system files.
Recommendations
For Johnson Controls Metasys versions prior to 11.0, update to a version newer than 11.0 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾