10
CVE-2023-4804
- EPSS 0.81%
- Veröffentlicht 10.11.2023 23:15:07
- Zuletzt bearbeitet 21.11.2024 08:36:00
- Quelle productsecurity@jci.com
- CVE-Watchlists
- Unerledigt
LoginQuantum HD Unity
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Johnsoncontrols ≫ Quantum Hd Unity Compressor Firmware Version >= 11.00 < 11.22
Johnsoncontrols ≫ Quantum Hd Unity Compressor Firmware Version >= 12.00 < 12.22
Johnsoncontrols ≫ Quantum Hd Unity Acuair Firmware Version >= 11.00 < 11.12
Johnsoncontrols ≫ Quantum Hd Unity Acuair Firmware Version >= 12.00 < 12.12
Johnsoncontrols ≫ Quantum Hd Unity Condenser/vessel Firmware Version >= 11.00 < 11.11
Johnsoncontrols ≫ Quantum Hd Unity Condenser/vessel Firmware Version >= 12.00 < 12.11
Johnsoncontrols ≫ Quantum Hd Unity Evaporator Firmware Version >= 11.00 < 11.11
Johnsoncontrols ≫ Quantum Hd Unity Evaporator Firmware Version >= 12.00 < 12.11
Johnsoncontrols ≫ Quantum Hd Unity Engine Room Firmware Version >= 11.00 < 11.11
Johnsoncontrols ≫ Quantum Hd Unity Engine Room Firmware Version >= 12.00 < 12.11
Johnsoncontrols ≫ Quantum Hd Unity Interface Firmware Version >= 11.00 < 11.11
Johnsoncontrols ≫ Quantum Hd Unity Interface Firmware Version >= 12.00 < 12.11
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.81% | 0.52 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| productsecurity@jci.com | 10 | 3.9 | 6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
CWE-489 Active Debug Code
The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.
https://www.johnsoncontrols.com/cyber-solutions/security-advisories
https://www.cisa.gov/news-events/ics-advisories/icsa-23-313-01