CVE-2023-3548: IQ Wifi 6
Published Jul 25, 2023
·Updated
An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting a brute force authentication attack.
Affected Software
3 affected components
: Johnson Controls Inc. IQ Wifi 6: All firmware versions prior to 2.0.2
Johnsoncontrols Iq Wifi 6 Firmware<2.0.2
Johnsoncontrols Iq Wifi 6
Remediation
Information
Upgrade IQ Wifi 6 firmware to version 2.0.2.
The firmware update will be pushed to all available devices in the field.
The firmware update can also be manually loaded by applying the patch tag “iqwifi2.0.2” on the device after navigating to its firmware update page.
Event History
Jul 25, 2023
CVE Published
via MITRE·01:01 PM
Data Sourced
via MITRE·01:01 PM
RemedyDescriptionSeverityWeakness
Data Sourced
02:15 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-3548.
2
What is the severity of CVE-2023-3548?
The severity of CVE-2023-3548 is critical with a CVSS score of 9.8.
3
How can an unauthorized user gain account access to IQ Wifi 6?
An unauthorized user can gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting a brute force authentication attack.
4
Which versions of IQ Wifi 6 are affected by CVE-2023-3548?
IQ Wifi 6 versions prior to 2.0.2 are affected by CVE-2023-3548.
5
How can I fix CVE-2023-3548?
To fix CVE-2023-3548, you should upgrade to IQ Wifi 6 version 2.0.2 or later.