CVE-2023-4804

🗓️ 10 Nov 2023 22:17:55Reported by jciType

An unauthorized user could access debug features in Quantum HD Unity products

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-4804	21 Nov 202314:32	–	circl
CNNVD	Johnson Controls FRICK Quantum HD Unity System Controller Security Vulnerability	10 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-4804 Quantum HD Unity	10 Nov 202322:17	–	cvelist
EUVD	EUVD-2023-54648	3 Oct 202520:07	–	euvd
ICS	Johnson Controls Quantum HD Unity	9 Nov 202307:00	–	ics
NVD	CVE-2023-4804	10 Nov 202323:15	–	nvd
Prion	Code injection	10 Nov 202323:15	–	prion
Positive Technologies	PT-2023-7057	9 Nov 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-4804 Quantum HD Unity	10 Nov 202322:17	–	vulnrichment

NVD

Node

johnsoncontrols quantum_hd_unity_compressor_firmwareRange11.00–11.22

johnsoncontrols quantum_hd_unity_compressor_firmwareRange12.00–12.22

AND

johnsoncontrols quantum_hd_unity_compressorMatch-

Node

johnsoncontrols quantum_hd_unity_acuair_firmwareRange11.00–11.12

johnsoncontrols quantum_hd_unity_acuair_firmwareRange12.00–12.12

AND

johnsoncontrols quantum_hd_unity_acuairMatch-

Node

johnsoncontrols quantum_hd_unity_condenser/vessel_firmwareRange11.00–11.11

johnsoncontrols quantum_hd_unity_condenser/vessel_firmwareRange12.00–12.11

AND

johnsoncontrols quantum_hd_unity_condenser/vesselMatch-

Node

johnsoncontrols quantum_hd_unity_evaporator_firmwareRange11.00–11.11

johnsoncontrols quantum_hd_unity_evaporator_firmwareRange12.00–12.11

AND

johnsoncontrols quantum_hd_unity_evaporatorMatch-

Node

johnsoncontrols quantum_hd_unity_engine_room_firmwareRange11.00–11.11

johnsoncontrols quantum_hd_unity_engine_room_firmwareRange12.00–12.11

AND

johnsoncontrols quantum_hd_unity_engine_roomMatch-

Node

johnsoncontrols quantum_hd_unity_interface_firmwareRange11.00–11.11

johnsoncontrols quantum_hd_unity_interface_firmwareRange12.00–12.11

AND

johnsoncontrols quantum_hd_unity_interfaceMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity Compressor",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.22",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.22",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity AcuAir",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.12",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.12",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity Condenser/Vessel",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity Evaporator",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity Engine Room",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Quantum HD Unity Interface",
    "vendor": "Johnson Controls",
    "versions": [
      {
        "lessThan": "11.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.11",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
johnsoncontrols	www.johnsoncontrols.com/cyber-solutions/security-advisories
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-313-01

21 Nov 2024 08:36Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8 - 10

EPSS0.00137

SSVC

CWE-489