CVE-2023-4804: Quantum HD Unity
Published Nov 10, 2023
·Updated
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.
Affected Software
18 affected components
All of the following
Any of the following
Johnsoncontrols Quantum Hd Unity Compressor Firmware>=11.00<11.22
Johnsoncontrols Quantum Hd Unity Compressor Firmware>=12.00<12.22
Johnsoncontrols Quantum Hd Unity Compressor
All of the following
Any of the following
Johnsoncontrols Quantum Hd Unity Acuair Firmware>=11.00<11.12
Johnsoncontrols Quantum Hd Unity Acuair Firmware>=12.00<12.12
Johnsoncontrols Quantum Hd Unity Acuair
All of the following
Any of the following
Johnsoncontrols Quantum Hd Unity Condenser\/vessel Firmware>=11.00<11.11
Johnsoncontrols Quantum Hd Unity Condenser\/vessel Firmware>=12.00<12.11
Johnsoncontrols Quantum Hd Unity Condenser\/vessel
All of the following
Any of the following
Johnsoncontrols Quantum Hd Unity Evaporator Firmware>=11.00<11.11
Johnsoncontrols Quantum Hd Unity Evaporator Firmware>=12.00<12.11
Johnsoncontrols Quantum Hd Unity Evaporator
All of the following
Any of the following
Johnsoncontrols Quantum Hd Unity Engine Room Firmware>=11.00<11.11
Johnsoncontrols Quantum Hd Unity Engine Room Firmware>=12.00<12.11
Johnsoncontrols Quantum Hd Unity Engine Room
All of the following
Any of the following
Johnsoncontrols Quantum Hd Unity Interface Firmware>=11.00<11.11
Johnsoncontrols Quantum Hd Unity Interface Firmware>=12.00<12.11
Johnsoncontrols Quantum Hd Unity Interface
Remediation
Information
Update all Quantum HD Unity Compressor control panels to firmware version 11.22 (Q5) or 12.22 (Q6).
Information
Update all Quantum HD Unity AcuAir control panels to firmware version 11.12 (Q5) or 12.12 (Q6).
Information
Update all Quantum HD Unity Condenser/Vessel control panels to firmware version 11.11 (Q5) or 12.11 (Q6).
Information
Update all Quantum HD Unity Evaporator control panels to firmware version 11.11 (Q5) or 12.11 (Q6).
Information
Update all Quantum HD Unity Engine Room control panels to firmware version 11.11 (Q5) or 12.11 (Q6).
Information
Update all Quantum HD Unity Interface control panels to firmware version 11.11 (Q5) or 12.11 (Q6).
Event History
Nov 10, 2023
CVE Published
via MITRE·10:17 PM
Data Sourced
via MITRE·10:17 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-4804?
CVE-2023-4804 is a vulnerability that allows unauthorized users to access debug features in Quantum HD Unity products.
2
How severe is CVE-2023-4804?
CVE-2023-4804 is classified as critical with a severity value of 10.
3
What software is affected by CVE-2023-4804?
Quantum HD Unity products with specific firmware versions are affected. Please refer to the product documentation for the exact versions.
4
How can I fix CVE-2023-4804?
To fix CVE-2023-4804, it is recommended to apply the latest firmware updates provided by Johnson Controls.
5
Where can I find more information about CVE-2023-4804?
You can find more information about CVE-2023-4804 on the Johnson Controls website and the CISA website.