[Control systems] Johnson Controls security advisory (AV23-683)

Serial number: AV23-683
Date: November 9, 2023

On November 9, 2023, CISA published an ICS advisory to address a vulnerability in the following products:

  • Quantum HD Unity Compressor control panels (Q5) – versions prior to v11.22
  • Quantum HD Unity Compressor control panels (Q6) – versions prior to v12.22
  • Quantum HD Unity AcuAir control panels (Q5) – versions prior to v11.12
  • Quantum HD Unity AcuAir control panels (Q6) – versions prior to v12.12
  • Quantum HD Unity Condenser/Vessel control panels (Q5) – versions prior to v11.11
  • Quantum HD Unity Condenser/Vessel control panels (Q6) – versions prior to v12.11
  • Quantum HD Unity Evaporator control panels (Q5) – versions prior to v11.11
  • Quantum HD Unity Evaporator control panels (Q6) – versions prior to v12.11
  • Quantum HD Unity Engine Room control panels (Q5) – versions prior to v11.11
  • Quantum HD Unity Engine Room control panels (Q6) – versions prior to v12.11
  • Quantum HD Unity Interface control panels (Q5) – versions prior to v11.11
  • Quantum HD Unity Interface control panels (Q6) – versions prior to v12.11

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

Date modified: