1 Advisory and 1 Update Published – 4-28-22

Today, CISA’s NCCIC-ICS published a control system security advisory for products from Johnson Controls and updated an advisory for products from Delta Electronics.

Johnson Controls Advisory

This advisory describes an improper privilege management vulnerability in the Johnson Controls Metasys ADS/ADX/OAS Servers. The vulnerability was self-reported. Johns…