[Control systems] Johnson Controls security advisory (AV23-078)

Serial number: AV23-078
Date: February 10, 2023

On February 9, 2023, ICS-CERT published a Security Advisory to address vulnerabilities in the following product:

• System Configuration Tool (SCT) version 14 – versions prior to 14.2.3
• System Configuration Tool (SCT) version 15 – versions prior to 15.0.3

Exploitation of these vulnerabilities could result in the impersonation of legitimate users.

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

• ICS Advisory (ICSA-23-040-03)