Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG: 3 record(s), with affected versions and fixes.

CVE-2025-61740 High · 7.2 CWE-346 Dec 22, 2025

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG Origin Validation Error

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device.

CVE-2025-26379 High · 7.2 CWE-338 Dec 22, 2025

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG use of Cryptographically Weak Pseudo-Random Number Generator

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

CVE-2025-61739 High · 7.2 CWE-323 Dec 22, 2025

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.