Johnson Controls PowerG, IQPanel and IQHub Weak Pseudo-Random Number Generator Vulnerability

A vulnerability exists in Johnson Controls PowerG, IQPanel and IQHub products due to the use of a weak pseudo-random number generator. This flaw may enable an attacker to read or inject encrypted PowerG packets. The affected products include PowerG, IQHub, IQPanel 2, IQPanel 2+, and IQPanel 4.

Impact

Exploitation of this vulnerability could allow an attacker to read or write encrypted PowerG traffic, or to perform a replay attack.