Johnson Controls PowerG, IQPanel and IQHub Network Key Capture Vulnerability

A vulnerability exists in Johnson Controls PowerG, IQPanel and IQHub products, allowing attackers to capture the network key and read or write encrypted packets on the PowerG network. This issue could also facilitate a replay attack. The vulnerability affects multiple versions of PowerG, IQPanel 2, IQPanel 2+, and IQPanel 4.

Impact

Exploitation of this vulnerability could lead to unauthorized interception and manipulation of encrypted communications on the PowerG network, potentially allowing for replay attacks.