Description
The KT-1 door controller is susceptible to replay or man-in-the-middle attacks where an attacker can record and replay TCP packets. This issue affects Johnson Controls KT-1 all versions up to and including 3.01
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnson Controls | KT-1 | all versions up to and including 3.01 – ≤ 3.01 | — |
Advisories 1
- ICSA-21-257-02 Johnson Controls Sensormatic Electronics KT-1 CISA ICS & IT advisories · Sep 14, 2021
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- ICS-CERT Advisory third-party-advisory