← Back

Johnsoncontrols

johnsoncontrols

68 CVEs • 113 products

Products (113)

Click to collapse
Toggle
Metasys Extended Application And Data Server
metasys_extended_application_and_data_server
11 CVEs
Metasys Application And Data Server
metasys_application_and_data_server
10 CVEs
Metasys Open Application Server
metasys_open_application_server
10 CVEs
Exacqvision Web Service
exacqvision_web_service
8 CVEs
Frick Controls Quantum Hd Firmware
frick_controls_quantum_hd_firmware
6 CVEs
Exacqvision Server
exacqvision_server
4 CVEs
Metasys System Configuration Tool
metasys_system_configuration_tool
4 CVEs
Metasys System
metasys_system
3 CVEs
C Cure 9000 Firmware
c-cure_9000_firmware
3 CVEs
Metsys
metsys
2 CVEs
Nae55 Firmware
nae55_firmware
2 CVEs
Kantech Entrapass
kantech_entrapass
2 CVEs
Exacqvision Enterprise Manager
exacqvision_enterprise_manager
2 CVEs
F4 Snc Firmware
f4-snc_firmware
2 CVEs
Videoedge
videoedge
2 CVEs
Istar Ultra Firmware
istar_ultra_firmware
2 CVEs
Openblue Enterprise Manager Data Collector
openblue_enterprise_manager_data_collector
2 CVEs
Network Controller
network_controller
1 CVE
Network Controller Firmware
network_controller_firmware
1 CVE
Pegasys P2000 Server Software
pegasys_p2000_server_software
1 CVE
Pegasys P2000 Server
pegasys_p2000_server
1 CVE
Bcpro
bcpro
1 CVE
Entrapass
entrapass
1 CVE
Metasys Lonworks Control Server
metasys_lonworks_control_server
1 CVE
Metasys Open Data Server
metasys_open_data_server
1 CVE
Nie55 Firmware
nie55_firmware
1 CVE
Nie59 Firmware
nie59_firmware
1 CVE
Nae85 Firmware
nae85_firmware
1 CVE
Nie85 Firmware
nie85_firmware
1 CVE
Ul 864 Uukl Firmware
ul_864_uukl_firmware
1 CVE
Ord C100 13 Uuklc Firmware
ord-c100-13_uuklc_firmware
1 CVE
Victor Web Client
victor_web_client
1 CVE
C Cure Web
c-cure_web
1 CVE
Victor Web
victor_web
1 CVE
Metasys Reporting Engine
metasys_reporting_engine
1 CVE
Metasys
metasys
1 CVE
Ac2000 Firmware
ac2000_firmware
1 CVE
Kantech Kt 1 Door Controller Firmware
kantech_kt-1_door_controller_firmware
1 CVE
Easyio Cpt Graphics
easyio_cpt_graphics
1 CVE
Cevas
cevas
1 CVE
Illustra Pro Gen 4 Dome Firmware
illustra_pro_gen_4_dome_firmware
1 CVE
Illustra Pro Gen 4 Ptz Firmware
illustra_pro_gen_4_ptz_firmware
1 CVE
Istar Ultra Lt Firmware
istar_ultra_lt_firmware
1 CVE
Istar Ultra G2 Firmware
istar_ultra_g2_firmware
1 CVE
Edge G2 Firmware
edge_g2_firmware
1 CVE
Iq Wifi 6 Firmware
iq_wifi_6_firmware
1 CVE
Quantum Hd Unity Compressor Firmware
quantum_hd_unity_compressor_firmware
1 CVE
Quantum Hd Unity Acuair Firmware
quantum_hd_unity_acuair_firmware
1 CVE
Quantum Hd Unity Condenser/vessel Firmware
quantum_hd_unity_condenser/vessel_firmware
1 CVE
Quantum Hd Unity Evaporator Firmware
quantum_hd_unity_evaporator_firmware
1 CVE
Quantum Hd Unity Engine Room Firmware
quantum_hd_unity_engine_room_firmware
1 CVE
Quantum Hd Unity Interface Firmware
quantum_hd_unity_interface_firmware
1 CVE
Sne22000 Firmware
sne22000_firmware
1 CVE
Sne11000 Firmware
sne11000_firmware
1 CVE
Sne10500 Firmware
sne10500_firmware
1 CVE
Sne110l0 Firmware
sne110l0_firmware
1 CVE
Snc25150 0 Firmware
snc25150-0_firmware
1 CVE
Snc25150 04 Firmware
snc25150-04_firmware
1 CVE
Snc16120 0 Firmware
snc16120-0_firmware
1 CVE
Snc16120 04 Firmware
snc16120-04_firmware
1 CVE
Iosmart Gen 1 Firmware
iosmart_gen_1_firmware
1 CVE
Qolsys Iq Panel 4 Firmware
qolsys_iq_panel_4_firmware
1 CVE
Qolsys Iq4 Hub Firmware
qolsys_iq4_hub_firmware
1 CVE
Software House C Cure 9000 Siteserver
software_house_c-cure_9000_siteserver
1 CVE
Exacqvision Client
exacqvision_client
1 CVE
Application And Data Server
application_and_data_server
0 CVEs
Extended Application And Data Server
extended_application_and_data_server
0 CVEs
Lonworks Control Server Lcs8520
lonworks_control_server_lcs8520
0 CVEs
Network Automation Engine 5510 2
network_automation_engine_5510-2
0 CVEs
Network Automation Engine 5510 2u
network_automation_engine_5510-2u
0 CVEs
Network Automation Engine 5511 2
network_automation_engine_5511-2
0 CVEs
Network Automation Engine 5520 2
network_automation_engine_5520-2
0 CVEs
Network Automation Engine 5521 2
network_automation_engine_5521-2
0 CVEs
Network Integration Engine 5510 2
network_integration_engine_5510-2
0 CVEs
Network Integration Engine 5511 2
network_integration_engine_5511-2
0 CVEs
Nxe8500
nxe8500
0 CVEs
Nae55
nae55
0 CVEs
Nie55
nie55
0 CVEs
Nie59
nie59
0 CVEs
Nae85
nae85
0 CVEs
Nie85
nie85
0 CVEs
Ul 864 Uukl
ul_864_uukl
0 CVEs
Ord C100 13 Uuklc
ord-c100-13_uuklc
0 CVEs
C Cure 9000
c-cure_9000
0 CVEs
F4 Snc
f4-snc
0 CVEs
Ac2000
ac2000
0 CVEs
Kantech Kt 1 Door Controller
kantech_kt-1_door_controller
0 CVEs
Istar Ultra
istar_ultra
0 CVEs
Metasys For Validated Environments
metasys_for_validated_environments
0 CVEs
Illustra Pro Gen 4 Dome
illustra_pro_gen_4_dome
0 CVEs
Illustra Pro Gen 4 Ptz
illustra_pro_gen_4_ptz
0 CVEs
Istar Ultra Lt
istar_ultra_lt
0 CVEs
Istar Ultra G2
istar_ultra_g2
0 CVEs
Edge G2
edge_g2
0 CVEs
Iq Wifi 6
iq_wifi_6
0 CVEs
Quantum Hd Unity Compressor
quantum_hd_unity_compressor
0 CVEs
Quantum Hd Unity Acuair
quantum_hd_unity_acuair
0 CVEs
Quantum Hd Unity Condenser/vessel
quantum_hd_unity_condenser/vessel
0 CVEs
Quantum Hd Unity Evaporator
quantum_hd_unity_evaporator
0 CVEs
Quantum Hd Unity Engine Room
quantum_hd_unity_engine_room
0 CVEs

CVEs (68)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-7594
1Johnsoncontrols
1Metasys System
Jun 17, 2026
Aug 20, 2019
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal (SMP).
CVE-2019-7593
1Johnsoncontrols
1Metasys System
Jun 17, 2026
Aug 20, 2019
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal (SMP).
CVE-2019-7590
1Johnsoncontrols
1Exacqvision Server
Jun 17, 2026
Jul 19, 2019
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be execut...Show more
ExacqVision Server’s services 'exacqVisionServer', 'dvrdhcpserver' and 'mdnsresponder' have an unquoted service path. If an authenticated user is able to insert code in their system root path it potentially can be executed during the application startup. This could allow the authenticated user to elevate privileges on the system. This issue affects: Exacq Technologies, Inc. exacqVision Server 9.6; 9.8. This issue does not affect: Exacq Technologies, Inc. exacqVision Server version 9.4 and prior versions; 19.03. It is not known whether this issue affects: Exacq Technologies, Inc. exacqVision Server versions prior to 8.4.Show less
CVE-2018-10624
1Johnsoncontrols
2Bcpro
Metasys System
Nov 21, 2024
Aug 1, 2018
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could all...Show more
In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical information.Show less
CVE-2014-5428
1Johnsoncontrols
1Metsys
May 6, 2026
Mar 29, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Contr...Show more
Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Control Server 85 LCS8520, Network Automation Engine (NAE) 55xx-x, Network Integration Engine (NIE) 5xxx-x, and NxE8500, allows remote attackers to execute arbitrary code by uploading a shell script.Show less
CVE-2014-5427
1Johnsoncontrols
1Metsys
May 6, 2026
Mar 29, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Control Server 85 LCS8520, Network Automation Engine (NAE) 55xx-x, Network...Show more
Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Control Server 85 LCS8520, Network Automation Engine (NAE) 55xx-x, Network Integration Engine (NIE) 5xxx-x, and NxE8500, allows remote attackers to read password hashes via a POST request.Show less
CVE-2012-4026
1Johnsoncontrols
2Pegasys P2000 Server
Pegasys P2000 Server Software
Apr 29, 2026
Jul 16, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via crafted packets to TCP port 41013 (aka the upload port), a different vulnerability than CVE-2012-260...Show more
The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via crafted packets to TCP port 41013 (aka the upload port), a different vulnerability than CVE-2012-2607.Show less
CVE-2012-2607
1Johnsoncontrols
2Network Controller
Network Controller Firmware
Apr 29, 2026
Jul 16, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
The Johnson Controls CK721-A controller with firmware before SSM4388_03.1.0.14_BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 (aka the download port).