目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Johnson Controls 厂商漏洞列表 / CVE 中文分析 101

Johnson Controls 厂商相关 101 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Johnson Controls 是全球领先的智能建筑解决方案提供商，其业务涵盖楼宇自动化、安防系统及能源管理。截至最新统计，该厂商已收录 76 条 CVE。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本攻击，常源于 Web 界面或 IoT 设备固件缺陷。值得关注的是，其 Tyco 安防产品线曾曝出严重配置错误，导致敏感数据泄露。随着物联网设备普及，其供应链安全与固件更新机制成为行业关注焦点，需持续强化端到端防护策略。

Top products by Johnson Controls: EasyIO FS32 Metasys ADS/ADX/OAS server Frick Controls Quantum HD exacqVision American Dynamics Illustra Essentials Gen 4 iSTAR Configuration Utility (ICU) Metasys IQ Panels2, 2+, IQHub, IQPanel 4, PowerG FM Systems Employee exacqVision Web Service OpenBlue Enterprise Manager Data Collector iSTAR Ultra, iSTAR Ultra SE System Configuration Tool (SCT) Airwall Software House C•CURE 9000 Metasys versions prior to 9.0 IQPanel2, IQHub,IQPanel2+,IQPanel 4,PowerG victor Web OpenBlue Workplace (formerly FM Systems) iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra , iSTAR Ultra SE Software House C•CURE 9000 Installer AC2000 CCure 9000 and victor application server Metasys NAE55/SNE/SNC XAAP Application TL280 Simplex Incident Manager / Autocall Fire Administrator Metasys 14 T2000 Easy IO FG
CVE ID 标题 CVSS 风险等级 Published
CVE-2023-4804 Johnson Controls FRICK Quantum HD Unity System Controller 安全漏洞 — Quantum HD Unity Compressor CWE-489 10.0 Critical 2023-11-10
CVE-2023-3548 Johnson Controls IQ Wifi 6 安全漏洞 — IQ Wifi 6 CWE-307 8.3 High 2023-07-25
CVE-2023-2025 Johnson Controls OpenBlue Enterprise Manager Data Collector 安全漏洞 — OpenBlue Enterprise Manager Data Collector CWE-200 5.0 Medium 2023-05-18
CVE-2023-2024 Johnson Controls OpenBlue Enterprise Manager Data Collector 授权问题漏洞 — OpenBlue Enterprise Manager Data Collector CWE-287 10.0 Critical 2023-05-18
CVE-2022-21940 Johnson Controls System Configuration Tool 跨站脚本漏洞 — System Configuration Tool (SCT) CWE-614 7.5 High 2023-02-09
CVE-2022-21939 Johnson Controls System Configuration Tool 跨站脚本漏洞 — System Configuration Tool (SCT) CWE-1004 7.5 High 2023-02-09
CVE-2021-36204 Johnson Controls Metasys ADS/ADX/OAS 安全漏洞 — Metasys ADS/ADX/OAS CWE-522 7.8 High 2023-01-13
CVE-2021-36206 Johnson Controls CKS CEVAS 跨站脚本漏洞 — CEVAS CWE-79 10.0 Critical 2022-10-28
CVE-2021-36201 Sensormatic Electronics C-CURE 9000 安全漏洞 — C•CURE 9000 CWE-204 4.3 Medium 2022-10-11
CVE-2022-21941 Johnson Controls iSTAR Ultra 命令注入漏洞 — iSTAR Ultra CWE-77 10.0 Critical 2022-08-31
CVE-2021-36200 Johnson Controls Metasys ADS/ADX/OAS Servers 访问控制错误漏洞 — Metasys ADS/ADX/OAS server CWE-306 5.3 Medium 2022-07-22
CVE-2022-21938 Johnson Controls Metasys ADS/ADX/OAS Servers 跨站脚本漏洞 — Metasys ADS/ADX/OAS server CWE-79 8.1 High 2022-06-15
CVE-2022-21935 Johnson Controls Metasys ADS/ADX/OAS Servers 授权问题漏洞 — Metasys ADS/ADX/OAS server CWE-620 7.5 High 2022-06-15
CVE-2022-21937 Johnson Controls Metasys ADS/ADX/OAS Servers 跨站脚本漏洞 — Metasys ADS/ADX/OAS server CWE-79 8.7 High 2022-06-15
CVE-2022-21934 Johnson Controls Metasys ADS/ADX/OAS servers 授权问题漏洞 — Metasys ADS/ADX/OAS server CWE-620 8.0 High 2022-05-06
CVE-2021-36207 Johnson Controls Metasys ADS/ADX/OAS Servers 安全漏洞 — Metasys ADS/ADX/OAS server CWE-269 8.8 High 2022-04-29
CVE-2021-36205 Johnson Controls Metasys ADS/ADX/OAS Servers 安全漏洞 — Metasys CWE-459 8.1 High 2022-04-15
CVE-2021-36202 Johnson Controls Metasys system 代码问题漏洞 — Metasys CWE-918 8.4 High 2022-04-07
CVE-2021-36199 Johnson Controls VideoEdge 安全漏洞 — VideoEdge CWE-228 5.3 Medium 2022-01-14
CVE-2021-36198 Johnson Controls exacqVision Server 信息泄露漏洞 — Entrapass CWE-200 8.3 High 2021-12-06
CVE-2021-27665 Johnson Controls exacqVision Server 输入验证错误漏洞 — exacqVision Web Service CWE-190 7.5 High 2021-10-11
CVE-2021-27664 Johnson Controls exacqVision Web Service 安全漏洞 — exacqVision Web Service CWE-269 9.8 Critical 2021-10-11
CVE-2021-27662 Johnson Controls KT-1 安全漏洞 — KT-1 CWE-294 8.6 High 2021-09-15
CVE-2021-27663 CEM Systems AC2000 安全漏洞 — CEM Systems AC2000 CWE-285 8.2 High 2021-08-30
CVE-2021-27661 Johnson Controls Facility Explorer 安全漏洞 — Facility Explorer SNC Series Supervisory Controllers (F4-SNC) CWE-269 8.8 High 2021-07-01
CVE-2021-27660 Johnson Controls C-CURE 输入验证错误漏洞 — C-CURE 9000 CWE-20 8.8 High 2021-07-01
CVE-2021-27659 Johnson Controls exacqVision Web Service 跨站脚本漏洞 — exacqVision Web Service CWE-79 5.3 Medium 2021-06-24
CVE-2021-27658 Johnson Controls exacqVision Enterprise Manager 跨站脚本漏洞 — exacqVision Enterprise Manager CWE-79 4.3 Medium 2021-06-24
CVE-2021-27657 Johnson Controls Metasys 安全漏洞 — Metasys CWE-269 8.8 High 2021-06-04
CVE-2021-27656 Johnson Controls exacqVision Web Service 信息泄露漏洞 — exacqVision Web Service version 20.12.2.0 and prior 5.3 Medium 2021-03-18

本页汇总了 Johnson Controls 厂商截至目前公开的全部 101 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。