Johnson Controls Quantum HD Unity

🗓️ 09 Nov 2023 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 51 Views

Johnson Controls Quantum HD Unity vulnerability. Allows unauthorized access to debug features. Applies to various control panels. Update to latest firmware versions for mitigation

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the microprogramming software for Quantum HD Unity Compressor, Quantum HD Unity AcuAir, Quantum HD Unity, Quantum HD Unity Engine Room, and Quantum HD Unity Interface allows a perpetrator to execute arbitrary commands.	23 Nov 202300:00	–	bdu_fstec
Circl	CVE-2023-4804	21 Nov 202314:32	–	circl
CNNVD	Johnson Controls FRICK Quantum HD Unity System Controller Security Vulnerability	10 Nov 202300:00	–	cnnvd
CVE	CVE-2023-4804	10 Nov 202322:17	–	cve
Cvelist	CVE-2023-4804 Quantum HD Unity	10 Nov 202322:17	–	cvelist
EUVD	EUVD-2023-54648	3 Oct 202520:07	–	euvd
NVD	CVE-2023-4804	10 Nov 202323:15	–	nvd
Prion	Code injection	10 Nov 202323:15	–	prion
Positive Technologies	PT-2023-7057	9 Nov 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-4804 Quantum HD Unity	10 Nov 202322:17	–	vulnrichment

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsa-23-313-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-23-313-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

09 Nov 2023 07:00Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8 - 10

EPSS0.00137

SSVC