CVE-2023-2025

OpenBlue Enterprise Manager Data Collector (Johnson Controls) firmware prior to 3.2.5.75 is affected. The ICS/NVD entries describe two related issues: (1) Improper authentication (CWE-287) where API calls may not require authentication, and (2) exposure of sensitive information to an unauthorized...

CVE-2023-2024

OpenBlue Enterprise Manager Data Collector (Johnson Controls) is affected when running firmware versions prior to 3.2.5.75. The vulnerability is described as improper authentication, allowing an unauthorized user to perform API calls under certain circumstances. The advisory details indicate that...