[Control systems] Johnson Controls security advisory (AV22-223)

Number: AV22-223
Date: 21 April 2022

On 21 April 2022 ICS-CERT published an ICS Advisory to highlight a vulnerability in the following products:

  • Metasys System Configuration Tool (SCT) – versions prior to 14.2.2
  • Metasys System Configuration Tool Pro (SCT Pro) – versions prior to 14.2.2

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

ICS Advisory (ICSA-22-111-02)

Report a problem on this page

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Please select all that apply:

Thank you for your help!

You will not receive a reply. For enquiries, please contact us.

Date modified: