Metasys Improper Privilege Management
CVE-2021-27657

8.8HIGH

Key Information:

Vendor: Johnson Controls
Status: Metasys
Vendor: CVE Published:; 4 June 2021

🔔 Create Johnson Controls Vulnerability Alert

What is CVE-2021-27657?

Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system. This issue affects: Johnson Controls Metasys version 11.0 and prior versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch