Approved changes feed: RSS · Atom

cpe:2.3:a:johnson_controls:frick_controls_quantum_hd:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJohnson Controls (9b52300a-5581-5d6d-8a56-383dd393de0f)
ProductFrick Controls Quantum Hd (0fadae05-e9d7-5206-b69b-cf9fcfd0e5f4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21660 vulnerable 2026-06-08 07:49:16.672969 Johnson Controls-Frick Quantum HD-Hardcoded Email Credentials Saved as Plaintext in Firmware
Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise This issue affects Frick Controls Quantum HD version 10.22 and prior.
Published: 2026-02-27T09:18:49.186Z
Updated: 2026-02-27T16:17:45.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21659 vulnerable 2026-06-08 07:49:16.672417 Johnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion
Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion (LFI) vulnerability in Johnson Controls Frick Controls Quantum HD allow an unauthenticated attacker to execute arbitrary code on the affected device, leading to full system compromise. This issue affects Frick Controls Quantum HD: Frick Controls Quantum HD version 10.22 and prior.
Published: 2026-02-27T09:08:50.498Z
Updated: 2026-03-06T18:40:42.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21658 vulnerable 2026-06-08 07:49:16.671811 Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
Unauthenticated Remote Code Execution i.e Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior.
Published: 2026-02-27T08:59:13.878Z
Updated: 2026-02-27T13:07:55.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21657 vulnerable 2026-06-08 07:49:16.671449 Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior.
Published: 2026-02-27T08:54:28.236Z
Updated: 2026-03-06T18:41:29.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21656 vulnerable 2026-06-08 07:49:16.670880 Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior.
Published: 2026-02-27T08:47:21.490Z
Updated: 2026-03-06T18:42:45.757Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21654 vulnerable 2026-06-08 07:49:16.669137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.