CVE-2025-26381

OpenBlue Mobile Web Application configuration issue for optional for OpenBlue Workplace (formerly FM Systems)

CVSS 6.5 MEDIUMEPSS 0.3%CWE-425

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:H/SI:L/SA:N/E:U

Produtos afetados

Johnson Controls · OpenBlue Workplace (formerly FM Systems)

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-03 https://tyco.widen.net/view/pdf/xmejieec4b/JCI-PSA-2025-05.pdf?t.download=true&u=aiurfs