Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-26379

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG use of Cryptographically Weak Pseudo-Random Number Generator

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Johnsoncontrols
Products
Iq Panels2 Iq Panels2+ Iqhub and 2 more
CVE-2025-61738

Johnson Controls PowerG and IQPanel cleartext transmission of sensitive information

Under certain circumstances, attacker can capture the network key, read or write encrypted packets on the PowerG network.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Johnsoncontrols
Products
Iq Panels2 Iq Panels2+ Iqhub and 2 more
CVE-2025-61739

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Johnsoncontrols
Products
Iq Panels2 Iq Panels2+ Iqhub and 2 more
CVE-2025-61740

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG Origin Validation Error

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Johnsoncontrols
Products
Iq Panels2 Iq Panels2+ Iqhub and 2 more