CVE-2023-2024

OpenBlue Enterprise Manager Data Collector (Johnson Controls) is affected when running firmware versions prior to 3.2.5.75. The vulnerability is described as improper authentication, allowing an unauthorized user to perform API calls under certain circumstances. The advisory details indicate that...

CISA Releases Five Industrial Control Systems Advisories

CISA released five Industrial Control Systems ICS advisories on May 16, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-138-01 Carlo Gavazzi Powersoft ICSA-23-138-02 Mitsubishi Electric MELSEC WS ICSA-23-138-0...

PT-2023-17421

Name of the Vulnerable Software and Affected Versions OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 Description The issue may expose sensitive information to an unauthorized user under certain circumstances. Recommendations For versions prior to 3.2.5.75, update to version...

Johnson Controls OpenBlue Enterprise Manager Data Collector 授权问题漏洞

The Johnson Controls OpenBlue Enterprise Manager Data Collector is an industrial PC from Johnson Controls that provides connectivity to instrumentation and building automation systems to extract data from EM applications. A security vulnerability exists in Johnson Controls OpenBlue Enterprise...

Johnson Controls OpenBlue Enterprise Manager Data Collector 安全漏洞

The Johnson Controls OpenBlue Enterprise Manager Data Collector is an industrial PC from Johnson Controls that provides connectivity to instrumentation and building automation systems to extract data from EM applications. A security vulnerability exists in Johnson Controls OpenBlue Enterprise...

CVE-2023-2024: Improper Authentication

Improper authentication in OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 allow access to an unauthorized user under certain circumstances...

PT-2023-17419 · Johnson Controls · Openblue Enterprise Manager Data Collector

Name of the Vulnerable Software and Affected Versions: OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 Description: The issue concerns improper authentication, allowing unauthorized access under certain circumstances. Recommendations: For versions prior to 3.2.5.75, update t...

CVE-2023-2025: Exposure of Sensitive Information to an Unauthorized Actor

OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 may expose sensitive information to an unauthorized user under certain circumstances...