Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

IQ Panels2, 2+, IQHub, IQPanel 4, PowerG

Source -

CNA

CNA CVEs -

3

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated VendorsRelated AssignersReports
3Vulnerabilities found

CVE-2025-61740
Assigner-Johnson Controls
ShareView Details
Assigner-Johnson Controls
CVSS Score-7.2||HIGH
EPSS-0.01% / 2.47%
||
7 Day CHG~0.00%
Published-22 Dec, 2025 | 14:32
Updated-23 Dec, 2025 | 14:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG Origin Validation Error

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device.

Action-Not Available
Vendor-Johnson Controls
Product-IQ Panels2, 2+, IQHub, IQPanel 4, PowerG
CWE ID-CWE-346
Origin Validation Error
CVE-2025-26379
Assigner-Johnson Controls
ShareView Details
Assigner-Johnson Controls
CVSS Score-7.2||HIGH
EPSS-0.02% / 5.54%
||
7 Day CHG~0.00%
Published-22 Dec, 2025 | 14:21
Updated-23 Dec, 2025 | 14:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG use of Cryptographically Weak Pseudo-Random Number Generator

Use of a weak pseudo-random number generator, which may allow an attacker to read or inject encrypted PowerG packets.

Action-Not Available
Vendor-Johnson Controls
Product-IQ Panels2, 2+, IQHub, IQPanel 4, PowerG
CWE ID-CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2025-61739
Assigner-Johnson Controls
ShareView Details
Assigner-Johnson Controls
CVSS Score-7.2||HIGH
EPSS-0.02% / 5.54%
||
7 Day CHG~0.00%
Published-22 Dec, 2025 | 10:19
Updated-23 Dec, 2025 | 14:51
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.

Action-Not Available
Vendor-Johnson Controls
Product-IQ Panels2, 2+, IQHub, IQPanel 4, PowerG
CWE ID-CWE-323
Reusing a Nonce, Key Pair in Encryption