← Back

CVE-2024-0242

nvd nist
Published: Feb 8, 2024Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to version 4.4.2 could allow unauthorized access to settings.

Affected (2)

Johnsoncontrols
2 products
Qolsys Iq Panel 4 Firmware
Qolsys Iq4 Hub Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Qolsys Iq Panel 4 Firmware
Before 4.4.2
Running on/withPlatform Versions
Johnsoncontrols
Qolsys Iq Panel 4
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Qolsys Iq4 Hub Firmware
Before 4.4.2
Running on/withPlatform Versions
Johnsoncontrols
Qolsys Iq4 Hub
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

Source: productsecurity@jci.com
Third Party AdvisoryUS Government Resource
Source: productsecurity@jci.com
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Product

Timeline

No history available yet.