Advisories · Technology

Johnson Controls Metasys versions prior to 9.0.

Every CVE that names Johnson Controls Metasys versions prior to 9.0 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-7594 CVE record

CVSS 6.8 Medium

Metasys use of hardcoded RC2 key
- Johnson Controls Metasys versions prior to 9.0
- Hard-coded credentials
Not analysed yet 20 Aug 2019
CVE-2019-7593 CVE record

CVSS 6.8 Medium

Metasys use of shared RSA key pairs
- Johnson Controls Metasys versions prior to 9.0
- CWE-323
Not analysed yet 20 Aug 2019