Description
Successful exploitation of this vulnerability could give an authenticated Facility Explorer SNC Series Supervisory Controller (F4-SNC) user an unintended level of access to the controller’s file system, allowing them to access or modify system files by sending specifically crafted web messages to the F4-SNC.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Johnson Controls Facility Explorer SNC Series Supervisory Controllers (F4-SNC)
Facility Explorer SNC Series Supervisory Controllers version 11 11affected