Vulnerabilidades do Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG: 3 registro(s), com versões afetadas e correções.

CVE-2025-61740 Alta · 7.2 CWE-346 22/12/2025

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG Origin Validation Error

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device.

CVE-2025-26379 Alta · 7.2 CWE-338 22/12/2025

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG use of Cryptographically Weak Pseudo-Random Number Generator

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

CVE-2025-61739 Alta · 7.2 CWE-323 22/12/2025

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.