目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Johnson Controls 厂商漏洞列表 / CVE 中文分析 101

Johnson Controls 厂商相关 101 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Johnson Controls 是全球领先的智能建筑解决方案提供商，其业务涵盖楼宇自动化、安防系统及能源管理。截至最新统计，该厂商已收录 76 条 CVE。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本攻击，常源于 Web 界面或 IoT 设备固件缺陷。值得关注的是，其 Tyco 安防产品线曾曝出严重配置错误，导致敏感数据泄露。随着物联网设备普及，其供应链安全与固件更新机制成为行业关注焦点，需持续强化端到端防护策略。

Top products by Johnson Controls: EasyIO FS32 Metasys ADS/ADX/OAS server Frick Controls Quantum HD exacqVision American Dynamics Illustra Essentials Gen 4 iSTAR Configuration Utility (ICU) Metasys IQ Panels2, 2+, IQHub, IQPanel 4, PowerG FM Systems Employee exacqVision Web Service OpenBlue Enterprise Manager Data Collector iSTAR Ultra, iSTAR Ultra SE System Configuration Tool (SCT) Airwall Software House C•CURE 9000 Metasys versions prior to 9.0 IQPanel2, IQHub,IQPanel2+,IQPanel 4,PowerG victor Web OpenBlue Workplace (formerly FM Systems) iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra , iSTAR Ultra SE Software House C•CURE 9000 Installer AC2000 CCure 9000 and victor application server Metasys NAE55/SNE/SNC XAAP Application TL280 Simplex Incident Manager / Autocall Fire Administrator Metasys 14 T2000 Easy IO FG
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-27873 Johnson Controls EasyIO FG <2.0b52 硬编码凭据漏洞 — EasyIO FG CWE-798 5.6 Medium 2026-10-01
CVE-2026-64893 Johnson Controls EasyIO NEO <3.3b25 明文传输漏洞 — EasyIO NEO CWE-319 7.3 High 2026-10-01
CVE-2026-64892 Johnson Controls Easy IO Neo 3.3b63前敏感信息泄露 — Easy IO Neo CWE-200 6.3 Medium 2026-10-01
CVE-2026-34494 Johnson Controls Neo Series MVP2 (<3.3b63) On-Chip调试接口数据收集漏洞 — Neo Series MVP2 CWE-1191 7.2 High 2026-10-01
CVE-2026-34493 Johnson Controls EasyIO FS32 <3.3b63 芯片调试接口漏洞 — EasyIO FS32 CWE-1191 7.2 High 2026-10-01
CVE-2026-71449 Johnson Controls EasyIO FS32 硬编码密钥漏洞 — EasyIO FS32 CWE-321 9.3 Critical 2026-10-01
CVE-2026-71448 EasyIO FS32 <3.0b63 不安全资源初始化认证滥用漏洞 — EasyIO FS32 CWE-1188 5.6 Medium 2026-10-01
CVE-2026-71453 Johnson Controls EasyIO FS32 (<3.0b63) 路径遍历漏洞 — EasyIO FS32 CWE-73 5.6 Medium 2026-10-01
CVE-2026-71452 Johnson Controls EasyIO FS32 3.0b63以下命令注入漏洞 — EasyIO FS32 CWE-78 7.2 High 2026-10-01
CVE-2026-71451 Johnson Controls EasyIO FS32 < 3.0b63 命令注入漏洞 — EasyIO FS32 CWE-78 5.6 Medium 2026-10-01
CVE-2026-27874 EasyIO FS32硬编码凭据漏洞 — EasyIO FS32 CWE-798 5.0 Medium 2026-10-01
CVE-2026-27872 EasyIO FG 远程代码执行漏洞 — Easy IO FG CWE-269 5.6 Medium 2026-10-01
CVE-2026-64896 Johnson Controls T2000 权限许可和访问控制问题漏洞 — T2000 5.2 Medium 2026-08-27
CVE-2026-34491 Johnson Controls Metasys 14 安全漏洞 — Metasys 14 6.1 Medium 2026-08-24
CVE-2026-27875 Johnson Controls Simplex Incident Manager 加密问题漏洞 — Simplex Incident Manager / Autocall Fire Administrator CWE-316 6.9 Medium 2026-08-21
CVE-2026-34492 Johnson Controls Airwall 输入验证错误漏洞 — Airwall CWE-73 7.0 High 2026-08-14
CVE-2026-64887 Johnson Controls Airwall 加密问题漏洞 — Airwall CWE-321 7.0 High 2026-08-14
CVE-2026-27871 Johnson Controls TL280 加密问题漏洞 — TL280 2.9 Low 2026-08-14
CVE-2026-34497 Johnson Controls FM Systems Employee 跨站脚本漏洞 — FM Systems Employee CWE-80 4.8 Medium 2026-07-31
CVE-2026-34495 Johnson Controls FM Systems Employee 跨站脚本漏洞 — FM Systems Employee CWE-79 4.8 Medium 2026-07-31
CVE-2026-21662 Johnson Controls FM Systems Employee 任意文件上传漏洞 — FM Systems Employee CWE-434 4.8 Medium 2026-07-31
CVE-2026-34490 Johnson Controls XAAP Application 加密问题漏洞 — XAAP Application CWE-312 4.8 Medium 2026-07-31
CVE-2026-34496 Johnson Controls victor web 权限许可和访问控制问题漏洞 — victor Web 7.1 High 2026-07-23
CVE-2026-21653 Johnson Controls victor 安全漏洞 — CCure 9000 and victor application server 7.2 High 2026-07-23
CVE-2026-21661 Johnson Controls AC2000 代码问题漏洞 — AC2000 CWE-427 8.4 High 2026-05-06
CVE-2026-21660 Johnson Controls Frick Controls Quantum HD 安全漏洞 — Frick Controls Quantum HD CWE-256 6.9 Medium 2026-02-27
CVE-2026-21659 Johnson Controls Frick Controls Quantum HD 安全漏洞 — Frick Controls Quantum HD CWE-23 9.8 - 2026-02-27
CVE-2026-21658 Johnson Controls Frick Controls Quantum HD 安全漏洞 — Frick Controls Quantum HD CWE-94 9.8 - 2026-02-27
CVE-2026-21657 Johnson Controls Frick Controls Quantum HD 安全漏洞 — Frick Controls Quantum HD CWE-94 6.8 - 2026-02-27
CVE-2026-21656 Johnson Controls Frick Controls Quantum HD 安全漏洞 — Frick Controls Quantum HD CWE-94 6.8 - 2026-02-27

本页汇总了 Johnson Controls 厂商截至目前公开的全部 101 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。