Skip to content
OpenAdvisories
Low · 2.3 CVE-2025-61738 EUVD-2025-204702GHSA-8953-5927-ff93

Johnson Controls PowerG and IQPanel cleartext transmission of sensitive information

Published Dec 22, 2025 · Updated Dec 22, 2025 · Assigned by jci

Vendor: Johnson Controls Product: IQPanel2, IQHub,IQPanel2+,IQPanel 4,PowerG

Description

Under certain circumstances, attacker can capture the network key, read or write encrypted packets on the PowerG network.

Affected products

VendorProductAffectedFixed
Johnson Controls IQPanel2, IQHub,IQPanel2+,IQPanel 4,PowerG IQPanel2 – ≤ 2, IQHub, IQPanel2+ – ≤ 2+, ,IQPanel 4 – ≤ 4.6.0, PowerG – ≤ 53.02 —

Advisories 1

References