Skip to content
OpenAdvisories
High · 7.2 CVE-2025-61739 EUVD-2025-204703GHSA-6635-2fcv-crph

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption

Published Dec 22, 2025 · Updated Dec 22, 2025 · Assigned by jci

Vendor: Johnson Controls Product: IQ Panels2, 2+, IQHub, IQPanel 4, PowerG

Description

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.

Affected products

VendorProductAffectedFixed
Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG IQPanel2 – ≤ 2, IQ Panels 2+ – ≤ 2+, IQHub, IQPanel 4 – ≤ 4.6.0 —

Advisories 1

References