PT-2021-17585 · Johnson Controls · Metasys

Jakub Palaczynski · Published 2021-06-04 · Updated 2021-12-02 · CVE-2021-27657

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Johnson Controls Metasys versions prior to 11.0

Description The issue allows an authenticated Metasys user to gain unintended access to the server file system. This can be achieved by sending specifically crafted web messages to the Metasys system, potentially enabling the user to access or modify system files.

Recommendations For Johnson Controls Metasys versions prior to 11.0, update to a version newer than 11.0 to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2021-27657

Affected Products

Metasys

References · 8

• https://johnsoncontrols.com/cyber-solutions/security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27657 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27657 · Vendor Advisory
• https://t.me/cvenotify/16742 · Telegram Post
• https://t.me/cvenotify/15577 · Telegram Post
• https://t.me/cvenotify/15586 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-21-159-01 · Note
• https://us-cert.gov/ics/advisories · Note