Skip to content
OpenAdvisories
High · 8.5 CVE-2025-43867 EUVD-2025-211325GHSA-6x23-3fm3-m5mr

- Dependency on Vulnerable Third-Party Component vulnerability in Johnson Controls FX Server, Johnson Controls FX80, and Johnson Controls F…

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by jci

Description

- Dependency on Vulnerable Third-Party Component vulnerability in Johnson Controls FX Server, Johnson Controls FX80, and Johnson Controls FX90 allows CAPEC‑17: Accessing, Modifying or Deleting Files.

This issue affects FX Server: before 14.10.10 and before 14.14.1; FX80: before 14.14.10 and before 14.14.1; FX90: before 14.10.10 and before 14.14.1.

Affected products

VendorProductAffectedFixed
Johnson Controls FX Server < 14.10.10, < 14.14.1 14.10.10
Johnson Controls FX80 < 14.14.10, < 14.14.1 14.14.10
Johnson Controls FX90 < 14.10.10, < 14.14.1 14.10.10

References