CVE-2024-32754CWE-200

Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information

Low · published July 4, 2024

CVSS v3.1
3.1
EPSS
0%
Percentile
12.0
In the wild
Unconfirmed
What it is

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.0th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-07-04T10:43Z
EPSS history
Timeline
  • 04 JUL 10:43Z
    Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information
    cvelistv5