Approved changes feed: RSS · Atom

cpe:2.3:o:johnsoncontrols:frick_controls_quantum_hd_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorJohnsoncontrols (3e1d627f-81d6-5827-bd4a-3f77847762e4)
ProductFrick Controls Quantum Hd Firmware (2a04b604-323b-595b-b9dd-27194f069f23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-21660 vulnerable 2026-06-08 07:49:16.673003 Johnson Controls-Frick Quantum HD-Hardcoded Email Credentials Saved as Plaintext in Firmware
Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise This issue affects Frick Controls Quantum HD version 10.22 and prior.
Published: 2026-02-27T09:18:49.186Z
Updated: 2026-02-27T16:17:45.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21659 vulnerable 2026-06-08 07:49:16.672456 Johnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion
Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion (LFI) vulnerability in Johnson Controls Frick Controls Quantum HD allow an unauthenticated attacker to execute arbitrary code on the affected device, leading to full system compromise. This issue affects Frick Controls Quantum HD: Frick Controls Quantum HD version 10.22 and prior.
Published: 2026-02-27T09:08:50.498Z
Updated: 2026-03-06T18:40:42.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21658 vulnerable 2026-06-08 07:49:16.671963 Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
Unauthenticated Remote Code Execution i.e Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior.
Published: 2026-02-27T08:59:13.878Z
Updated: 2026-02-27T13:07:55.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21657 vulnerable 2026-06-08 07:49:16.671485 Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior.
Published: 2026-02-27T08:54:28.236Z
Updated: 2026-03-06T18:41:29.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21656 vulnerable 2026-06-08 07:49:16.670925 Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior.
Published: 2026-02-27T08:47:21.490Z
Updated: 2026-03-06T18:42:45.757Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-21654 vulnerable 2026-06-08 07:49:16.669705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.