CVE-2025-61739CWE-323

CVE-2025-61739

published December 22, 2025

CVSS
7.2
EPSS
0%
Percentile
7.8
In the wild
Unconfirmed
What it is

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.

The record
Technical detail
CVSS
7.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00186 · 7.8th percentile
Weakness
CWE-323 · Reusing a Nonce, Key Pair in Encryption
Published
2025-12-22T16:15Z
References (2)
https://www.cisa.gov/news-events/ics-advisories/icsa-25-350-02 · [email protected]https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories · [email protected]
EPSS history
Timeline
  • 22 DEC 10:19Z
    Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption
    cvelistv5