Code Injection Vulnerability in Johnson Controls Frick Controls Quantum HD
CVE-2026-21657
8.8HIGH
What is CVE-2026-21657?
A code injection vulnerability exists in the Frick Controls Quantum HD by Johnson Controls due to insufficient input validation in specific parameters. This flaw could allow unauthorized execution of actions, potentially compromising the device's security before user authentication takes place. The issue affects Frick Controls Quantum HD versions 10.22 and earlier, making it crucial for users to update their systems and implement proper security measures.
Affected Version(s)
Frick Controls Quantum HD Frick Controls Quantum HD version 10.22 and prior
References
CVSS V4
Score:
8.8
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Noam Moshe of Claroty Team 82 Research group