Vulnerability Description
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Johnsoncontrols | Quantum Hd Unity Compressor Firmware | >= 11.00, < 11.22 |
| Johnsoncontrols | Quantum Hd Unity Compressor | - |
| Johnsoncontrols | Quantum Hd Unity Acuair Firmware | >= 11.00, < 11.12 |
| Johnsoncontrols | Quantum Hd Unity Acuair | - |
| Johnsoncontrols | Quantum Hd Unity Condenser\/Vessel Firmware | >= 11.00, < 11.11 |
| Johnsoncontrols | Quantum Hd Unity Condenser\/Vessel | - |
| Johnsoncontrols | Quantum Hd Unity Evaporator Firmware | >= 11.00, < 11.11 |
| Johnsoncontrols | Quantum Hd Unity Evaporator | - |
| Johnsoncontrols | Quantum Hd Unity Engine Room Firmware | >= 11.00, < 11.11 |
| Johnsoncontrols | Quantum Hd Unity Engine Room | - |
| Johnsoncontrols | Quantum Hd Unity Interface Firmware | >= 11.00, < 11.11 |
| Johnsoncontrols | Quantum Hd Unity Interface | - |
Related Weaknesses (CWE)
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-313-01Third Party AdvisoryUS Government Resource
- https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesVendor Advisory
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-313-01Third Party AdvisoryUS Government Resource
- https://www.johnsoncontrols.com/cyber-solutions/security-advisoriesVendor Advisory
FAQ
What is CVE-2023-4804?
CVE-2023-4804 is a vulnerability with a CVSS score of 10.0 (CRITICAL). An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.
How severe is CVE-2023-4804?
CVE-2023-4804 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-4804?
Check the references section above for vendor advisories and patch information. Affected products include: Johnsoncontrols Quantum Hd Unity Compressor Firmware, Johnsoncontrols Quantum Hd Unity Compressor, Johnsoncontrols Quantum Hd Unity Acuair Firmware, Johnsoncontrols Quantum Hd Unity Acuair, Johnsoncontrols Quantum Hd Unity Condenser\/Vessel Firmware.