Approved changes feed: RSS · Atom

cpe:2.3:a:johnson_controls:iq_panels2,_2+,_iqhub,_iqpanel_4,_powerg:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJohnson Controls (9b52300a-5581-5d6d-8a56-383dd393de0f)
ProductIq Panels2, 2+, Iqhub, Iqpanel 4, Powerg (468bbd84-c8f5-5db5-a760-ee1c41f52bec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-61740 vulnerable 2026-06-08 07:37:27.975258 Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG Origin Validation Error
Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device.
Published: 2025-12-22T14:32:07.619Z
Updated: 2025-12-22T16:20:04.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61739 vulnerable 2026-06-08 07:37:27.974843 Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption
Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.
Published: 2025-12-22T10:19:34.183Z
Updated: 2025-12-22T13:09:17.628Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-26379 vulnerable 2026-06-08 07:12:51.566410 Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG use of Cryptographically Weak Pseudo-Random Number Generator
Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.
Published: 2025-12-22T14:21:29.597Z
Updated: 2025-12-22T16:19:25.130Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.