THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE
PUBLISHED

CVE-2024-32754

Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information

Assignerjci
Reserved2024-04-17
Published2024-07-04
Updated2024-07-08

Description

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information.



LOW: 3.1CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Product status

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Credits

National Computer Emergency Response Team (CERT) of India finder

References

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-01

cve.org CVE-2024-32754

nvd.nist.gov CVE-2024-32754

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-32754
© Copyright 2024 THREATINT. Made in Cyprus with +