CVE-2025-61739: Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption
Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PowerG+to a version that resolves this vulnerability.Fixed in 53.05 - Upgrade
Upgrade
Johnson Controls IQ Panel 4to a version that resolves this vulnerability.Fixed in 4.6.1 - Compensating control
Allow only authorized company personnel or integrators to be present during the pairing process.
- Operational
During installation or enrollment of PowerG+ devices, enter the PIN code in the PIN Code field on the sensor enrollment screen.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61739?
CVE-2025-61739 has a critical severity rating due to its potential for unauthorized decryption and replay attacks.
How do I fix CVE-2025-61739?
To fix CVE-2025-61739, update the affected Johnson Controls products to the latest firmware version provided by the vendor.
What types of attacks can CVE-2025-61739 facilitate?
CVE-2025-61739 can facilitate replay attacks and allow attackers to decrypt captured packets.
Which products are affected by CVE-2025-61739?
CVE-2025-61739 affects Johnson Controls IQ Panels2, IQPanel 4, IQHub, and PowerG devices.
Is there a workaround for CVE-2025-61739 if immediate patching is not possible?
Currently, the recommended action for CVE-2025-61739 is to apply the firmware updates as no specific workaround is provided.