CVE-2025-61740CWE-346

CVE-2025-61740

published December 22, 2025

CVSS
7.2
EPSS
0%
Percentile
2.6
In the wild
Unconfirmed
What it is

Authentication issue that does not verify the source of a packet which could allow an attacker to create a denial-of-service condition or modify the configuration of the device.

The record
Technical detail
CVSS
7.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00133 · 2.6th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2025-12-22T20:16Z
References (2)
https://www.cisa.gov/news-events/ics-advisories/icsa-25-350-02 · [email protected]https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories · [email protected]
EPSS history
Timeline
  • 22 DEC 14:32Z
    Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG Origin Validation Error
    cvelistv5