CVE-2023-0954: Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras

Q: What is CVE-2023-0954?

CVE-2023-0954 is a vulnerability in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras that allows a user to compromise credentials after a long period of sustained attack.

Q: What is the severity of CVE-2023-0954?

CVE-2023-0954 has a severity rating of 9.8 (critical).

Q: Which software versions are affected by CVE-2023-0954?

The Sensormatic Electronics Illustra Pro Gen 4 Dome firmware up to and including ss016.05.09.04.0006 and the Illustra Pro Gen 4 PTZ firmware up to and including ss010.05.09.04.0022 are affected by CVE-2023-0954.

Q: How can the vulnerability be exploited?

The vulnerability can be exploited by performing a long period of sustained attack to compromise credentials on the affected cameras.

Q: Where can I find more information about CVE-2023-0954?

You can find more information about CVE-2023-0954 from the official advisories published by CISA and Johnson Controls.

Published Jun 8, 2023

Updated

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack.

Affected Software

6 affected components

Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. Pro Gen 4 Dome: Up to and including Illustra.SS016.05.09.04.0006

Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. Pro Gen 4 PTZ: Up to and including Illustra.SS010.05.09.04.0022

Johnsoncontrols Illustra Pro Gen 4 Dome Firmware<=ss016.05.09.04.0006

Johnsoncontrols Illustra Pro Gen 4 Dome

Johnsoncontrols Illustra Pro Gen 4 Ptz Firmware<=ss010.05.09.04.0022

Johnsoncontrols Illustra Pro Gen 4 Ptz

Remediation

Information

Update Illustra Pro Gen 4 Dome to version 6.00.00

Information

Update Illustra Pro Gen 4 PTZ to version 6.00.00

Information

The camera can be upgraded via the web GUI using firmware provided by Illustra which can be found on www.illustracameras.com http://www.illustracameras.com . The firmware can also be upgraded using the Illustra Connect tool (Windows based) or Illustra Tools (mobile app) or victor/VideoEdge, which also provides bulk firmware upgrade capability. Please refer to the respective application documents for further information.

Event History

Jun 8, 2023

CVE Published

via MITRE·08:05 PM

Data Sourced

via MITRE·08:05 PM

RemedyDescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

ICSA-23-159-02

Frequently Asked Questions

What is CVE-2023-0954?

CVE-2023-0954 is a vulnerability in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras that allows a user to compromise credentials after a long period of sustained attack.

What is the severity of CVE-2023-0954?

CVE-2023-0954 has a severity rating of 9.8 (critical).

Which software versions are affected by CVE-2023-0954?

The Sensormatic Electronics Illustra Pro Gen 4 Dome firmware up to and including ss016.05.09.04.0006 and the Illustra Pro Gen 4 PTZ firmware up to and including ss010.05.09.04.0022 are affected by CVE-2023-0954.

How can the vulnerability be exploited?

The vulnerability can be exploited by performing a long period of sustained attack to compromise credentials on the affected cameras.

Where can I find more information about CVE-2023-0954?

You can find more information about CVE-2023-0954 from the official advisories published by CISA and Johnson Controls.

CVE-2023-0954: Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras

Affected Software

Remediation

Information

Information

Information

Event History

Parent advisories

Frequently Asked Questions

What is CVE-2023-0954?

What is the severity of CVE-2023-0954?

Which software versions are affected by CVE-2023-0954?

How can the vulnerability be exploited?

Where can I find more information about CVE-2023-0954?

Company

Resources

Contact