{"id": "CVE-2023-4486", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "productsecurity@jci.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2023-12-07T20:15:38.530", "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-341-03", "tags": ["Third Party Advisory", "US Government Resource"], "source": "productsecurity@jci.com"}, {"url": "https://www.johnsoncontrols.com/cyber-solutions/security-advisories", "tags": ["Vendor Advisory"], "source": "productsecurity@jci.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-770"}]}, {"type": "Secondary", "source": "productsecurity@jci.com", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to \n\nversions 11.0.6 and 12.0.4\n\n and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service.\n\n"}, {"lang": "es", "value": "En determinadas circunstancias, se podr\u00edan enviar credenciales de autenticaci\u00f3n no v\u00e1lidas al endpoint de inicio de sesi\u00f3n de los motores Johnson Controls Metasys NAE55, SNE y SNC anteriores a la versi\u00f3n 12.0.4 y a los motores Facility Explorer F4-SNC anteriores a las versiones 11.0.6 y 12.0.4 para causar negaci\u00f3n de servicio."}], "lastModified": "2023-12-19T17:15:07.377", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:johnsoncontrols:nae55_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "318A4239-1481-428C-B016-06E90553EA54", "versionEndExcluding": "12.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:johnsoncontrols:nae55:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "019B3C3A-BB07-4BC2-B3DB-1C0DEA374251"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:johnsoncontrols:sne22000_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FDD5E06-7317-43C5-8AF7-BA93493BE3ED", "versionEndExcluding": "12.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:johnsoncontrols:sne22000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "62172D94-FE04-421D-82CE-591478DCFCE3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:johnsoncontrols:sne11000_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C20F153-371B-4D79-A792-DA6283339C9E", "versionEndExcluding": "12.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:johnsoncontrols:sne11000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E057F276-8A92-4686-8A8F-ECB21B7CF684"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:johnsoncontrols:sne10500_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E7BA2B1-EF29-4E71-B57D-5201590E67B4", "versionEndExcluding": "12.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:johnsoncontrols:sne10500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F50590BF-749B-4C98-831B-FD136C37D947"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:johnsoncontrols:sne110l0_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1EA003B-2FA9-4F13-ADCF-B1259385F2FA", "versionEndExcluding": "12.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:johnsoncontrols:sne110l0:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EBA6E1AC-53C1-45CC-803D-13E18D479CC8"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:johnsoncontrols:snc25150-0_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47C1BE3E-D364-46C4-B297-EA0A5446656B", "versionEndExcluding": "12.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:johnsoncontrols:snc25150-0:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "24AF3CDD-A0BE-41A6-9A82-2DE7D0FCD246"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:johnsoncontrols:snc25150-04_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24406024-FDF7-4C97-88A1-67A376E54BFD", "versionEndExcluding": "12.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:johnsoncontrols:snc25150-04:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "91D059DE-095D-4243-B101-16913E68E461"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:johnsoncontrols:snc16120-0_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22431067-9203-4CCD-A6E7-A89A7B576A51", "versionEndExcluding": "12.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:johnsoncontrols:snc16120-0:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4D330345-BE9B-409C-BAA6-EB72A5CE9430"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:johnsoncontrols:snc16120-04_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "321A5153-048F-4328-89CB-D7E57C72C914", "versionEndExcluding": "12.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:johnsoncontrols:snc16120-04:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "73B490CE-EE4B-48B7-AD7D-2EFF95D0F45F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:johnsoncontrols:f4-snc_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A49D88F1-20F3-4F73-A3AC-0E5701005F8D", "versionEndExcluding": "11.0.6"}, {"criteria": "cpe:2.3:o:johnsoncontrols:f4-snc_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD9211CC-D01B-4E01-8813-996F7C3A59AC", "versionEndExcluding": "12.0.4", "versionStartIncluding": "12.0.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:johnsoncontrols:f4-snc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "281D5513-A663-48DE-98D8-240C1FC767B5"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "productsecurity@jci.com"}
