CVE-2023-4486
Estado: ModificadaAlta (7.5)—
Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to
versions 11.0.6 and 12.0.4
and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.83%
- Percentil entre todas las CVEs puntuadas: 56
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (10)
Johnsoncontrols — F4-snc FirmwareJohnsoncontrols — Nae55 FirmwareJohnsoncontrols — Snc16120-04 FirmwareJohnsoncontrols — Snc16120-0 FirmwareJohnsoncontrols — Snc25150-04 FirmwareJohnsoncontrols — Snc25150-0 FirmwareJohnsoncontrols — Sne10500 FirmwareJohnsoncontrols — Sne11000 FirmwareJohnsoncontrols — Sne110l0 FirmwareJohnsoncontrols — Sne22000 Firmware
CWE
- CWE-400
- CWE-770
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-4486",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-4486",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2023-12-23T05:01:05.723101Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "productsecurity@jci.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "productsecurity@jci.com",
"affectedData": [
{
"vendor": "Johnson Controls",
"product": "Metasys NAE55/SNE/SNC",
"versions": [
{
"status": "affected",
"version": "12.0",
"lessThan": "12.0.4",
"versionType": "custom"
},
{
"status": "affected",
"version": "11.0",
"lessThan": "11.0.6",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Johnson Controls",
"product": "Facility Explorer F4-SNC",
"versions": [
{
"status": "affected",
"version": "12.0",
"lessThan": "12.0.4",
"versionType": "custom"
},
{
"status": "affected",
"version": "11.0",
"lessThan": "11.0.6",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2023-12-07T20:15:38.530",
"references": [
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-341-03",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "productsecurity@jci.com"
},
{
"url": "https://www.johnsoncontrols.com/cyber-solutions/security-advisories",
"tags": [
"Vendor Advisory"
],
"source": "productsecurity@jci.com"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-23-341-03",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.johnsoncontrols.com/cyber-solutions/security-advisories",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "productsecurity@jci.com",
"description": [
{
"lang": "en",
"value": "CWE-400"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-770"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to \n\nversions 11.0.6 and 12.0.4\n\n and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service.\n\n"
},
{
"lang": "es",
"value": "En determinadas circunstancias, se podrían enviar credenciales de autenticación no válidas al endpoint de inicio de sesión de los motores Johnson Controls Metasys NAE55, SNE y SNC anteriores a la versión 12.0.4 y a los motores Facility Explorer F4-SNC anteriores a las versiones 11.0.6 y 12.0.4 para causar negación de servicio."
}
],
"lastModified": "2026-06-17T06:37:56.070",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:johnsoncontrols:nae55_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "318A4239-1481-428C-B016-06E90553EA54",
"versionEndExcluding": "12.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:johnsoncontrols:nae55:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "019B3C3A-BB07-4BC2-B3DB-1C0DEA374251"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:johnsoncontrols:sne22000_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FDD5E06-7317-43C5-8AF7-BA93493BE3ED",
"versionEndExcluding": "12.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:johnsoncontrols:sne22000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "62172D94-FE04-421D-82CE-591478DCFCE3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:johnsoncontrols:sne11000_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C20F153-371B-4D79-A792-DA6283339C9E",
"versionEndExcluding": "12.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:johnsoncontrols:sne11000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E057F276-8A92-4686-8A8F-ECB21B7CF684"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:johnsoncontrols:sne10500_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E7BA2B1-EF29-4E71-B57D-5201590E67B4",
"versionEndExcluding": "12.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:johnsoncontrols:sne10500:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F50590BF-749B-4C98-831B-FD136C37D947"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:johnsoncontrols:sne110l0_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1EA003B-2FA9-4F13-ADCF-B1259385F2FA",
"versionEndExcluding": "12.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:johnsoncontrols:sne110l0:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EBA6E1AC-53C1-45CC-803D-13E18D479CC8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:johnsoncontrols:snc25150-0_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "47C1BE3E-D364-46C4-B297-EA0A5446656B",
"versionEndExcluding": "12.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:johnsoncontrols:snc25150-0:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "24AF3CDD-A0BE-41A6-9A82-2DE7D0FCD246"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:johnsoncontrols:snc25150-04_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24406024-FDF7-4C97-88A1-67A376E54BFD",
"versionEndExcluding": "12.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:johnsoncontrols:snc25150-04:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "91D059DE-095D-4243-B101-16913E68E461"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:johnsoncontrols:snc16120-0_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22431067-9203-4CCD-A6E7-A89A7B576A51",
"versionEndExcluding": "12.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:johnsoncontrols:snc16120-0:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4D330345-BE9B-409C-BAA6-EB72A5CE9430"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:johnsoncontrols:snc16120-04_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "321A5153-048F-4328-89CB-D7E57C72C914",
"versionEndExcluding": "12.0.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:johnsoncontrols:snc16120-04:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "73B490CE-EE4B-48B7-AD7D-2EFF95D0F45F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:johnsoncontrols:f4-snc_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A49D88F1-20F3-4F73-A3AC-0E5701005F8D",
"versionEndExcluding": "11.0.6"
},
{
"criteria": "cpe:2.3:o:johnsoncontrols:f4-snc_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD9211CC-D01B-4E01-8813-996F7C3A59AC",
"versionEndExcluding": "12.0.4",
"versionStartIncluding": "12.0.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:johnsoncontrols:f4-snc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "281D5513-A663-48DE-98D8-240C1FC767B5"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "productsecurity@jci.com"
}