Vulnerabilities (CVE)

Filtered by vendor Johnsoncontrols Subscribe
Filtered by product Metasys System
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-7593 1 Johnsoncontrols 1 Metasys System 2020-02-10 6.4 MEDIUM 9.1 CRITICAL
Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal (SMP).
CVE-2019-7594 1 Johnsoncontrols 1 Metasys System 2020-02-10 6.4 MEDIUM 9.1 CRITICAL
Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal (SMP).