目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

Johnson Controls 厂商漏洞列表 / CVE 中文分析 101

Johnson Controls 厂商相关 101 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

Johnson Controls 是全球领先的智能建筑解决方案提供商，其业务涵盖楼宇自动化、安防系统及能源管理。截至最新统计，该厂商已收录 76 条 CVE。历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本攻击，常源于 Web 界面或 IoT 设备固件缺陷。值得关注的是，其 Tyco 安防产品线曾曝出严重配置错误，导致敏感数据泄露。随着物联网设备普及，其供应链安全与固件更新机制成为行业关注焦点，需持续强化端到端防护策略。

Top products by Johnson Controls: EasyIO FS32 Metasys ADS/ADX/OAS server Frick Controls Quantum HD exacqVision American Dynamics Illustra Essentials Gen 4 iSTAR Configuration Utility (ICU) Metasys IQ Panels2, 2+, IQHub, IQPanel 4, PowerG FM Systems Employee exacqVision Web Service OpenBlue Enterprise Manager Data Collector iSTAR Ultra, iSTAR Ultra SE System Configuration Tool (SCT) Airwall Software House C•CURE 9000 Metasys versions prior to 9.0 IQPanel2, IQHub,IQPanel2+,IQPanel 4,PowerG victor Web OpenBlue Workplace (formerly FM Systems) iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra , iSTAR Ultra SE Software House C•CURE 9000 Installer AC2000 CCure 9000 and victor application server Metasys NAE55/SNE/SNC XAAP Application TL280 Simplex Incident Manager / Autocall Fire Administrator Metasys 14 T2000 Easy IO FG
CVE ID 标题 CVSS 风险等级 Published
CVE-2020-9050 Johnson Controls Metasys Reporting Engine Web Services 路径遍历漏洞 — Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.1 7.5 High 2021-02-19
CVE-2020-9049 Johnson Controls Victor Web Client 授权问题漏洞 — victor Web Client version 5.6 and prior CWE-285 7.1 High 2020-11-19
CVE-2020-9048 Johnson Controls Johnsoncontrols Victor 授权问题漏洞 — victor Web Client version 5.4.1 and prior CWE-285 7.1 High 2020-10-08
CVE-2020-9047 Johnson Controls exacqVision Enterprise Manager和Web Service 数据伪造问题漏洞 — exacqVision Web Service versions 20.03.2.0 and prior CWE-347 6.8 Medium 2020-06-26
CVE-2020-9046 Johnson Controls Kantech EntraPass 访问控制错误漏洞 — Kantech EntraPass Security Management Software Special Edition versions 8.22 and prior CWE-284 8.8 High 2020-05-26
CVE-2020-9045 Johnson Controls Software House C?CURE 9000和American Dynamics victor Video Management System 安全漏洞 — Software House C•CURE 9000 v2.70 CWE-312 9.9 Critical 2020-05-21
CVE-2019-7589 Johnson Controls Kantech EntraPass 输入验证错误漏洞 — Kantech EntraPass Corporate Edition CWE-20 9.8 Critical 2020-03-10
CVE-2020-9044 多款Johnson Controls产品代码问题漏洞 — Metasys Application and Data Server (ADS, ADS-Lite) CWE-611 7.5 High 2020-03-10
CVE-2019-7594 Johnson Controls Metasys system 信任管理问题漏洞 — Metasys versions prior to 9.0 CWE-321 9.1 - 2019-08-20
CVE-2019-7593 Johnson Controls Metasys system 信任管理问题漏洞 — Metasys versions prior to 9.0 CWE-323 7.5 - 2019-08-20
CVE-2018-10624 Johnson Controls Metasys System和BCPro 安全漏洞 — Metasys System CWE-209 4.3 Medium 2018-08-01

本页汇总了 Johnson Controls 厂商截至目前公开的全部 101 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。