CVE-2025-61739: Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption
Published Dec 22, 2025
·Updated
Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.
Affected Software
4 affected components
Johnson Controls IQ Panels2
Johnson Controls IQPanel 4
Johnson Controls IQHub
Johnson Controls PowerG
Remediation
Information
a. Update IQ Panel 4’s to version 4.6.1/4.6.1i
b. Devices that support PowerG+ should use PowerG v53.05 or later.
c. During the installation or enrollment of PowerG+ devices, enter the PIN code in the PIN Code field on the sensor enrollment screen. For additional security, Johnson Controls recommends only authorized company personnel or integrators be present during the pairing process
d. Replace all End-of-Life Products (IQ Panel 2, IQ Panel 2+, IQ Hub) with the latest IQ Panel 4 using firmware version 4.6.1 or greater
Event History
Dec 22, 2025
CVE Published
via MITRE·10:19 AM
Data Sourced
via MITRE·10:19 AM
RemedyDescriptionWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-61739?
CVE-2025-61739 has a critical severity rating due to its potential for unauthorized decryption and replay attacks.
2
How do I fix CVE-2025-61739?
To fix CVE-2025-61739, update the affected Johnson Controls products to the latest firmware version provided by the vendor.
3
What types of attacks can CVE-2025-61739 facilitate?
CVE-2025-61739 can facilitate replay attacks and allow attackers to decrypt captured packets.
4
Which products are affected by CVE-2025-61739?
CVE-2025-61739 affects Johnson Controls IQ Panels2, IQPanel 4, IQHub, and PowerG devices.
5
Is there a workaround for CVE-2025-61739 if immediate patching is not possible?
Currently, the recommended action for CVE-2025-61739 is to apply the firmware updates as no specific workaround is provided.