Unrated severityNVD Advisory· Published Apr 29, 2022· Updated Sep 17, 2024

Metasys privilege management

CVE-2021-36207

Description

Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Johnson Controls/Metasysllm-fuzzy
Range: versions 10 and 11
Johnson Controls/Metasys ADS/ADX/OAScpe-rescue
Range: All 10 versions

Patches

Vulnerability mechanics

References

www.cisa.gov/uscert/ics/advisories/icsa-22-118-01mitrethird-party-advisoryx_refsource_CERT
www.johnsoncontrols.com/cyber-solutions/security-advisoriesmitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000