Known vulnerabilities in Metasys System

Vendor: Johnson Controls
Software: Metasys System
Software CPE: cpe:2.3:a:johnson_controls:metasys_system:*:*:*:*:*:*:*:*
Website: https://www.johnsoncontrols.com/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Metasys System Metasys System is affected by 4 known vulnerabilities: 3 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53993 - Improper Privilege Management
CVE-2021-27657		 CWE-269 Medium
No
No
 - 09.06.2021 SB2021060922
#VU20345 - Use of Hard-coded Cryptographic Key
CVE-2019-7594		 CWE-321 Medium
No
No
 9.0 21.08.2019 SB2019082103
#VU20344 - Reusing a Nonce, Key Pair in Encryption
CVE-2019-7593		 CWE-323 Medium
No
No
 9.0 21.08.2019 SB2019082103
#VU14152 - Information Exposure Through an Error Message
CVE-2018-10624		 CWE-209 Low
No
No
 - 31.07.2018 SB2018080108