CVE-2023-4804

🗓️ 10 Nov 2023 22:17:55Reported by jciType

An unauthorized user could access debug features in Quantum HD Unity products

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	Quantum HD Unity Arbitrary Command Execution	23 Nov 202300:00	–	bdu_fstec
Circl	CVE-2023-4804	21 Nov 202314:32	–	circl
CNNVD	Johnson Controls FRICK Quantum HD Unity System Controller Security Vulnerability	10 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-4804 Quantum HD Unity	10 Nov 202322:17	–	cvelist
EUVD	EUVD-2023-54648	3 Oct 202520:07	–	euvd
ICS	Johnson Controls Quantum HD Unity	9 Nov 202307:00	–	ics
NVD	CVE-2023-4804	10 Nov 202323:15	–	nvd
osv_cve	CVE-2023-4804	10 Nov 202323:15	–	osv_cve
Prion	Code injection	10 Nov 202323:15	–	prion
Positive Technologies	PT-2023-7057	9 Nov 202300:00	–	ptsecurity

NVD

Node

AND

johnsoncontrols quantum_hd_unity_compressor_firmwareRange11.00–11.22

johnsoncontrols quantum_hd_unity_compressor_firmwareRange12.00–12.22

johnsoncontrols quantum_hd_unity_compressorMatch-

Node

AND

johnsoncontrols quantum_hd_unity_acuair_firmwareRange11.00–11.12

johnsoncontrols quantum_hd_unity_acuair_firmwareRange12.00–12.12

johnsoncontrols quantum_hd_unity_acuairMatch-

Node

AND

johnsoncontrols quantum_hd_unity_condenser/vessel_firmwareRange11.00–11.11

johnsoncontrols quantum_hd_unity_condenser/vessel_firmwareRange12.00–12.11

johnsoncontrols quantum_hd_unity_condenser/vesselMatch-

Node

AND

johnsoncontrols quantum_hd_unity_evaporator_firmwareRange11.00–11.11

johnsoncontrols quantum_hd_unity_evaporator_firmwareRange12.00–12.11

johnsoncontrols quantum_hd_unity_evaporatorMatch-

Node

AND

johnsoncontrols quantum_hd_unity_engine_room_firmwareRange11.00–11.11

johnsoncontrols quantum_hd_unity_engine_room_firmwareRange12.00–12.11

johnsoncontrols quantum_hd_unity_engine_roomMatch-

Node

AND

johnsoncontrols quantum_hd_unity_interface_firmwareRange11.00–11.11

johnsoncontrols quantum_hd_unity_interface_firmwareRange12.00–12.11

johnsoncontrols quantum_hd_unity_interfaceMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity Compressor",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.22",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.22",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity AcuAir",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.12",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.12",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity Condenser/Vessel",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity Evaporator",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity Engine Room",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity Interface",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
johnsoncontrols	www.johnsoncontrols.com/cyber-solutions/security-advisories
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-313-01

17 Jun 2026 06:38Current

8.2High risk

Vulners AI Score8.2

CVSS 3.19.8 - 10

EPSS0.00807

SSVC

CWE-489