Johnson Controls Frick Controls Quantum HD Unauthenticated Remote Code Execution and Information Disclosure Vulnerability

A vulnerability allowing unauthenticated remote code execution and information disclosure through local file inclusion has been identified in Johnson Controls Frick Controls Quantum HD versions 10.22 and prior. This vulnerability allows an unauthenticated attacker to execute arbitrary code on the affected device, leading to a full system compromise.

Impact

Exploitation of this vulnerability can result in pre-authentication remote code execution, unauthorized information disclosure, and a complete compromise of the affected system.