Johnson Controls PowerG, IQPanel and IQHub Authentication Vulnerability Allowing Denial-of-Service and Configuration Modification

An authentication vulnerability has been identified in Johnson Controls PowerG, IQPanel and IQHub products. This issue arises because the source of packets is not properly verified, potentially enabling an attacker to cause a denial-of-service condition or alter the device's configuration. The vulnerability affects multiple versions of PowerG, IQPanel 2, IQPanel 2+, IQPanel 4 and IQHub.

Impact

Exploitation of this vulnerability could lead to unauthorized modification of device configurations or the creation of a denial-of-service condition.