Medium severity6.8NVD Advisory· Published Aug 20, 2019· Updated Jun 17, 2026

CVE-2019-7594

Description

Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a hardcoded RC2 key for certain encryption operations involving the Site Management Portal (SMP).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Johnsoncontrols/Metasys System
cpe:2.3:a:johnsoncontrols:metasys_system:*:*:*:*:*:*:*:*
Range: <9.0
Johnson Controls/Metasysllm-fuzzy
Range: <9.0
Johnson Controls/Metasys versions prior to 9.0v5
Range: 9.0

Patches

Vulnerability mechanics

References

www.johnsoncontrols.com/-/media/jci/cyber-solutions/product-security-advisories/2019/jci-psa-2019-06-v1-metasys-icsa-19-227-01.pdfnvdVendor Advisory
www.us-cert.gov/ics/advisories/icsa-19-227-01nvdMitigationThird Party AdvisoryUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000