Vulnerabilidades em Johnson Controls

111 resultados
Análise Vexday

Com 76 CVEs catalogadas, o portfólio de vulnerabilidades da Johnson Controls apresenta taxa de exploração ativa abaixo da média geral do catálogo KEV, sem registros confirmados de exploração em andamento. Ainda assim, 11 falhas de severidade crítica merecem atenção prioritária nos ciclos de gestão de patches, especialmente CVE-2020-9047, que concentra o maior escore EPSS observado no conjunto (0,0777) e permanece como a vulnerabilidade de maior risco relativo ativo. A falha mais recorrente por tipo é CWE-79 (Cross-Site Scripting), sugerindo lacunas recorrentes em validação de entrada nas interfaces web dos produtos. A ausência de novas CVEs nos últimos 90 dias e a existência de apenas um PoC público reduzem a superfície de ameaça imediata, mas não eliminam a necessidade de monitoramento contínuo dado o volume crítico acumulado.

CVE-2026-34497MEDIUMFMS Employee Vulnerable to HTML InjectionEPSS 0.2%CVE-2026-34495MEDIUMFMS Employee vulnerable to XSSEPSS 0.2%CVE-2024-32754LOWJohnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive InformationEPSS 0.2%CVE-2024-32864MEDIUMexacqVison - HTTPS Session EstablishmentEPSS 0.2%CVE-2024-32863MEDIUMexacqVison - CSRF issues with Web ServiceEPSS 0.2%CVE-2026-64896MEDIUMT2000 open debug portEPSS 0.2%CVE-2025-26379HIGHJohnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG use of Cryptographically Weak Pseudo-Random Number GeneratorEPSS 0.2%CVE-2025-61739HIGHJohnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryptionEPSS 0.2%CVE-2025-61738LOWJohnson Controls PowerG and IQPanel cleartext transmission of sensitive informationEPSS 0.2%CVE-2026-106019HIGHInsertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System EPSS 0.2%CVE-2024-0912HIGHCCURE passwords exposed to administratorsEPSS 0.2%CVE-2026-64887HIGHAirwall - Hardcoded SecretsEPSS 0.2%CVE-2024-32861HIGHSoftware House C•CURE - CouchDB executable protectionEPSS 0.1%CVE-2026-71448MEDIUM: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affecEPSS 0.1%CVE-2026-27874MEDIUM: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. TEPSS 0.1%CVE-2025-61740HIGHJohnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG Origin Validation ErrorEPSS 0.1%CVE-2024-32865MEDIUMexacqVison - TLS certificate validationEPSS 0.1%CVE-2026-106020HIGHImproper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows SEPSS 0.1%CVE-2026-71453MEDIUM- External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack. This issue affects EasyIO EPSS 0.1%CVE-2026-64893HIGH- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issuEPSS 0.1%