Description
Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnson Controls | IQ Panels2, 2+, IQHub, IQPanel 4, PowerG | IQ Panels2 – ≤ 2, IQ Panels2+ – ≤ 2+, IQHub, IQPanel 4 – ≤ 4.6.0, PowerG – ≤ 53.02 | — |
Advisories 1
- ICSA-25-350-02 Johnson Controls PowerG, IQPanel and IQHub (Update A) CISA ICS & IT advisories · Mar 5, 2026