The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request.
References
Link | Resource |
---|---|
https://www.cisa.gov/uscert/ics/advisories/icsa-22-111-02 | Third Party Advisory US Government Resource |
https://www.cisa.gov/uscert/ics/advisories/icsa-22-111-02 | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:13
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 6.4
v3 : 5.3 |
References | () https://www.cisa.gov/uscert/ics/advisories/icsa-22-111-02 - Third Party Advisory, US Government Resource |
03 May 2022, 20:38
Type | Values Removed | Values Added |
---|---|---|
Summary | The affected product may allow an attacker to identify and forge requests to internal systems by way of a specially crafted request. | |
References |
|
|
References | (CERT) https://www.cisa.gov/uscert/ics/advisories/icsa-22-111-02 - Third Party Advisory, US Government Resource | |
CWE | CWE-918 | |
CPE | cpe:2.3:a:johnsoncontrols:metasys_system_configuration_tool:*:*:*:*:pro:*:*:* cpe:2.3:a:johnsoncontrols:metasys_system_configuration_tool:*:*:*:*:-:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : 6.4
v3 : 9.1 |
22 Apr 2022, 15:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-04-22 15:15
Updated : 2024-11-21 06:13
NVD link : CVE-2021-36203
Mitre link : CVE-2021-36203
CVE.ORG link : CVE-2021-36203
JSON object : View
Products Affected
johnsoncontrols
- metasys_system_configuration_tool
CWE
CWE-918
Server-Side Request Forgery (SSRF)