Vulnerabilities in Johnson Controls
111 resultsCVE-2022-21935HIGHMetasys password guessingEPSS 1.0%CVE-2020-9045CRITICALC•CURE 9000 and victor Video Management System - Cleartext storage of user credentials upon installation or upgrade of software.EPSS 1.0%CVE-2021-36207HIGHMetasys privilege managementEPSS 1.0%CVE-2022-21934HIGHMetasys Unverified Password ChangeEPSS 1.0%CVE-2021-27658MEDIUMexacqVision Enterprise Manager CSSEPSS 0.9%CVE-2018-10624MEDIUMJohnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive InformationEPSS 0.9%CVE-2021-27662HIGHKT-1 Capture-replayEPSS 0.8%CVE-2023-4486HIGHUncontrolled Resource Consumption in Metasys and Facility ExplorerEPSS 0.8%CVE-2019-7593MEDIUMMetasys use of shared RSA key pairsEPSS 0.8%CVE-2021-27661HIGHFacility ExplorerEPSS 0.8%CVE-2021-36202HIGHMetasys UIEPSS 0.8%CVE-2023-4804CRITICALQuantum HD UnityEPSS 0.8%CVE-2026-21658HIGHJohnson Controls -Frick Quantum HD- Unauthenticated Remote Code ExecutionEPSS 0.7%CVE-2021-36200MEDIUMMetasys ADS/ADX/OAS with MUIEPSS 0.7%CVE-2026-34498MEDIUML4LEPSS 0.7%CVE-2026-71452HIGH- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection.
This issue affects EasyIO FS32: before 3.EPSS 0.7%CVE-2021-36201MEDIUMCCURE Observable Response DiscrepancyEPSS 0.6%CVE-2019-7594MEDIUMMetasys use of hardcoded RC2 keyEPSS 0.6%CVE-2022-21937HIGHMetasys CSSEPSS 0.6%CVE-2024-32752HIGHJohnson Controls Software House iSTAR Configuration Utility (ICU) ToolEPSS 0.6%