CVE-2025-61738CWE-319

CVE-2025-61738

published December 22, 2025

CVSS
2.3
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

Under certain circumstances, attacker can capture the network key, read or write encrypted packets on the PowerG network.

The record
Technical detail
CVSS
2.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2025-12-22T16:15Z
References (2)
https://www.cisa.gov/news-events/ics-advisories/icsa-25-350-02 · [email protected]https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories · [email protected]
EPSS history
Timeline
  • 22 DEC 10:07Z
    Johnson Controls PowerG and IQPanel cleartext transmission of sensitive information
    cvelistv5