Skip to content
OpenAdvisories
High · 7.2 CVE-2025-26379 EUVD-2025-204711GHSA-wcw3-c785-7q5x

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG use of Cryptographically Weak Pseudo-Random Number Generator

Published Dec 22, 2025 · Updated Dec 22, 2025 · Assigned by jci

Vendor: Johnson Controls Product: IQ Panels2, 2+, IQHub, IQPanel 4, PowerG

Description

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

Affected products

VendorProductAffectedFixed
Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG IQ Panels2 – ≤ 2, IQ Panel 2+ – ≤ 2+, IQHub, IQPanel 4 – ≤ 4.6.0, PowerG – ≤ 53.02 —

Advisories 1

References