September 8, 2024
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Update – Okta Warns About 5,000 Employees Having Data Exposed After Hacking of Third-Party Vendor
November 7, 2023
Rewterz Threat Alert – Lazarus (aka Hidden Cobra) APT Group – Active IOCs
November 13, 2023
Rewterz Threat Update – Okta Warns About 5,000 Employees Having Data Exposed After Hacking of Third-Party Vendor
November 7, 2023
Rewterz Threat Alert – Lazarus (aka Hidden Cobra) APT Group – Active IOCs
November 13, 2023
Severity
High
Analysis Summary
CVE-2023-4804
Johnson Controls Quantum HD Unity could allow a remote attacker to bypass security restrictions, caused by improper authorization validation. By sending a specially crafted request, an attacker could exploit this vulnerability to access debug features.
Impact
- Security Bypass
Indicators Of Compromise
CVE
- CVE-2023-4804
Affected Vendors
Johnson Controls
Affected Products
- Johnson Controls Quantum HD Unity Compressor control panels
- Johnson Controls Quantum HD Unity AcuAir control panels
- Johnson Controls Quantum HD Unity Condenser/Vessel control panels
- Johnson Controls Quantum HD Unity Evaporator control panels
Remediation
Refer to Johnson Controls for patch, upgrade or suggested workaround information.