Johnson Controls Metasys Products
Successful exploitation of this vulnerability could result in remote SQL execution, leading to alteration or loss of data.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-26385US | — | — | ||
Johnson Controls Metasys component listed below have Improper Neutralization of Special Elements used in a Command (Command Injection) Vulnerability . Successful exploitation of t… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-26-027-04 JSONself
- ICSA Advisory ICSA-26-027-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (6)
- MitigationMetasys Application and Data Server (ADS)
Additionally, closing incoming TCP port 1433 can protect against exploitation of this vulnerability.
- MitigationMetasys Controller Configuration Tool (CCT)
Additionally, closing incoming TCP port 1433 can protect against exploitation of this vulnerability.
- MitigationMetasys Extended Application and Data Server (ADX)
Additionally, closing incoming TCP port 1433 can protect against exploitation of this vulnerability.
- MitigationMetasys LCS8500
Additionally, closing incoming TCP port 1433 can protect against exploitation of this vulnerability.
- MitigationMetasys NAE8500
Additionally, closing incoming TCP port 1433 can protect against exploitation of this vulnerability.
- MitigationMetasys System Configuration Tool (SCT)
Additionally, closing incoming TCP port 1433 can protect against exploitation of this vulnerability.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan