Skip to content
OpenAdvisories
Low · 3.1 CVE-2024-32754 EUVD-2024-30541GHSA-5cpx-cp4v-x9v8

Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information

Published Jul 4, 2024 · Updated Aug 27, 2025 · Assigned by jci

Description

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information.

Affected products

VendorProductAffectedFixed
Johnson Controls Kantech KT1 Door Controller, Rev01 ≤ 2.09.10 —
Johnson Controls Kantech KT2 Door Controller, Rev01 ≤ 2.09.10 —
Johnson Controls Kantech KT400 Door Controller, Rev01 ≤ 3.01.16 —

Advisories 1

References