PT-2026-22324 · Johnson Controls · Quantum Hd
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Johnson Controls Frick Controls Quantum HD versions prior to 10.22
Description
A flaw exists in Johnson Controls Frick Controls Quantum HD that allows for the execution of code remotely without authentication. This is due to insufficient validation of input parameters, potentially enabling unexpected actions. The issue is a type of code injection.
Recommendations
Update to a version newer than 10.22.
Correção
RCE
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Quantum Hd