IQ Wifi 6
CVE-2023-3548

8.3HIGH

Key Information:

Vendor

Johnson Controls

Status
Iq Wifi 6
Vendor
CVE Published:
25 July 2023

What is CVE-2023-3548?

An emerging cybersecurity concern affects the IQ Wifi 6, with vulnerabilities allowing unauthorized users to gain access by exploiting brute force authentication methods. This flaw particularly impacts versions prior to 2.0.2, providing a potential entry point for malicious actors aiming to compromise network integrity and user safety.

Affected Version(s)

IQ Wifi 6 0 < 2.0.2

References

https://www.johnsoncontrols.com/cyber-solutions/security-...
https://www.cisa.gov/news-events/ics-advisories/icsa-23-2...

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.