CVE-2023-4486
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Uncontrolled Resource Consumption in Metasys and Facility Explorer
Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to versions 11.0.6 and 12.0.4 and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Metasys NAE55/SNE/SNC
- Vendor
- Johnson Controls
- Product
- Metasys NAE55/SNE/SNC
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 12.0 | affected | custom | 12.0.4 | Unavailable | None listed |
| 11.0 | affected | custom | 11.0.6 | Unavailable | None listed |
Facility Explorer F4-SNC
- Vendor
- Johnson Controls
- Product
- Facility Explorer F4-SNC
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 12.0 | affected | custom | 12.0.4 | Unavailable | None listed |
| 11.0 | affected | custom | 11.0.6 | Unavailable | None listed |