Critical ICSA-23-313-01 1 CVE

Johnson Controls Quantum HD Unity

Published Nov 9, 2023 · Updated Nov 9, 2023

Vendor: Johnson Controls Product: Quantum HD Unity AcuAir control panels (Q5) Product: Quantum HD Unity AcuAir control panels (Q6) Product: Quantum HD Unity Compressor control panels (Q5) Product: Quantum HD Unity Compressor control panels (Q6) Product: Quantum HD Unity Condenser/Vessel control panels (Q5) Product: Quantum HD Unity Condenser/Vessel control panels (Q6) Product: Quantum HD Unity Engine Room control panels (Q5) Product: Quantum HD Unity Engine Room control panels (Q6) Product: Quantum HD Unity Evaporator control panels (Q5) Product: Quantum HD Unity Evaporator control panels (Q6) Product: Quantum HD Unity Interface control panels (Q5) Product: Quantum HD Unity Interface control panels (Q6)

Summary

Successful exploitation of this vulnerability could allow an unauthorized user to access debug features that were accidentally exposed.

Vulnerabilities 1

Critical 10.0

CVE-2023-4804

Quantum HD Unity

An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.

Johnson Controls Quantum HD Unity AcuAir Quantum HD Unity Evaporator Quantum HD Unity Interface

Nov 10, 2023

Revision history

2023-11-09 #1
Initial Publication

References

ICSA Advisory ICSA-23-313-01 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-23-313-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B