Vulnerability · Published Apr 7, 2022 · Assigned by jci
CVE-2021-36202Metasys UI
High 8.4
In plain English
A high-severity server-side request forgery in Metasys from Johnson Controls. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).
Severity (CVSS 3.1)8.4High
Exploit odds (30 days)0.8%top 42.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Server-Side Request Forgery (SSRF) vulnerability in Johnson Controls Metasys could allow an authenticated attacker to inject malicious code into the MUI PDF export feature. This issue affects: Johnson Controls Metasys All 10 versions versions prior to 10.1.5; All 11 versions versions prior to 11.0.2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Johnson Controls | Metasys | All 10 versions – before 10.1.5All 11 versions – before 11.0.2 |
Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories x_refsource_CONFIRM
- ICS-CERT Advisory third-party-advisory, x_refsource_CERT