[Control Systems] Johnson Controls security advisory (AV22-223)

Number: AV22-223
Date: 21 April 2022

On 21 April 2022 ICS-CERT published an ICS Advisory to highlight a vulnerability in the following products:

• Metasys System Configuration Tool (SCT) – versions prior to 14.2.2
• Metasys System Configuration Tool Pro (SCT Pro) – versions prior to 14.2.2

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

ICS Advisory (ICSA-22-111-02)

Source

About Author

Federico Spadaro

See author's posts