Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 2 min 162 bronnen 13 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2014-5428

HIGH · 10.0 CVSS Gepubliceerd:

Beschrijving

Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka ADX), LonWorks Control Server 85 LCS8520, Network Automation Engine (NAE) 55xx-x, Network Integration Engine (NIE) 5xxx-x, and NxE8500, allows remote attackers to execute arbitrary code by uploading a shell script.

Vendors

Johnsoncontrols

Affected products

Metsys Application And Data Server Extended Application And Data Server Lonworks Control Server Lcs8520 Network Automation Engine 5510-2 Network Automation Engine 5510-2u Network Automation Engine 5511-2 Network Automation Engine 5520-2 Network Automation Engine 5521-2 Network Integration Engine 5510-2 Network Integration Engine 5511-2 Nxe8500

References