PT-2019-18662 · Johnson Controls · Metasys
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Metasys versions prior to 9.0
Description
The issue concerns the use of a hardcoded RC2 key for encryption operations involving the Site Management Portal.
Recommendations
For versions prior to 9.0, update to version 9.0 or later to resolve the issue.
Fix
Using Hardcoded Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Metasys