ICSA-23-313-01: Johnson controls quantum hd unity compressor control panels (q5) vulnerability
Affected Software
12 affected componentsFixes available
: Johnson Controls Inc. Quantum HD Unity Compressor control panels (Q5)<11.22
11.22
: Johnson Controls Inc. Quantum HD Unity Compressor control panels (Q6)<12.22
12.22
: Johnson Controls Inc. Quantum HD Unity AcuAir control panels(Q5)<11.12
11.12
: Johnson Controls Inc. Quantum HD Unity AcuAir control panels(Q6)<12.12
12.12
: Johnson Controls Inc. Quantum HD Unity Condenser/Vessel control panels (Q5)<11.11
11.11
: Johnson Controls Inc. Quantum HD Unity Condenser/Vessel control panels (Q6)<12.11
12.11
: Johnson Controls Inc. Quantum HD Unity Evaporator control panels (Q5)<11.11
11.11
: Johnson Controls Inc. Quantum HD Unity Evaporator control panels (Q6)<12.11
12.11
: Johnson Controls Inc. Quantum HD Unity Engine Room control panels (Q5)<11.11
11.11
: Johnson Controls Inc. Quantum HD Unity Engine Room control panels (Q6)<12.11
12.11
: Johnson Controls Inc. Quantum HD Unity Interface control panels (Q5)<11.11
11.11
: Johnson Controls Inc. Quantum HD Unity Interface control panels (Q6)<12.11
12.11
Event History
Feb 22, 2025
Advisory Published
11:38 PM
Frequently Asked Questions
1
What is the severity of ICSA-23-313-01?
The severity of ICSA-23-313-01 is categorized as high due to potential unauthorized access risks.
2
What products are affected by ICSA-23-313-01?
ICSA-23-313-01 affects Johnson Controls Inc. Quantum HD Unity Compressor, AcuAir, Condenser/Vessel, and Evaporator control panels (Q5 and Q6).
3
How do I fix ICSA-23-313-01?
To fix ICSA-23-313-01, it is advised to update the affected control panel firmware to the latest version provided by Johnson Controls Inc.
4
What vulnerabilities does ICSA-23-313-01 address?
ICSA-23-313-01 addresses vulnerabilities related to improper authentication and access control in the affected control panels.
5
When was ICSA-23-313-01 published?
ICSA-23-313-01 was published on November 9, 2023.