Johnsoncontrols Nae55 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Johnsoncontrols Nae55 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-9044 — CVSS 7.5 (high): XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of…
• CVE-2023-4486 — CVSS 7.5 (high): Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE…