← Back

CVE-2023-0954

nvd nist
Published: Jun 8, 2023Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack.

Affected (2)

Johnsoncontrols
2 products
Illustra Pro Gen 4 Dome Firmware
Illustra Pro Gen 4 Ptz Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Illustra Pro Gen 4 Dome Firmware
Up to ss016.05.09.04.0006
Running on/withPlatform Versions
Johnsoncontrols
Illustra Pro Gen 4 Dome
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Illustra Pro Gen 4 Ptz Firmware
Up to ss010.05.09.04.0022
Running on/withPlatform Versions
Johnsoncontrols
Illustra Pro Gen 4 Ptz
All versions

Related CWEs

CWE-489
Active Debug Code
The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.

References (4)

Source: productsecurity@jci.com
Third Party AdvisoryUS Government Resource
Source: productsecurity@jci.com
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link

Timeline

No history available yet.