[Control systems] Johnson Controls security advisory (AV23-683)

Serial number: AV23-683
Date: November 9, 2023

On November 9, 2023, CISA published an ICS advisory to address a vulnerability VulnerabilityA flaw or weakness in the design or implementation of an information system or its environment that could be exploited to adversely affect an organization's assets or operations. in the following products:

  • Quantum HD Unity Compressor control panels (Q5) – versions prior to v11.22
  • Quantum HD Unity Compressor control panels (Q6) – versions prior to v12.22
  • Quantum HD Unity AcuAir control panels (Q5) – versions prior to v11.12
  • Quantum HD Unity AcuAir control panels (Q6) – versions prior to v12.12
  • Quantum HD Unity Condenser/Vessel control panels (Q5) – versions prior to v11.11
  • Quantum HD Unity Condenser/Vessel control panels (Q6) – versions prior to v12.11
  • Quantum HD Unity Evaporator control panels (Q5) – versions prior to v11.11
  • Quantum HD Unity Evaporator control panels (Q6) – versions prior to v12.11
  • Quantum HD Unity Engine Room control panels (Q5) – versions prior to v11.11
  • Quantum HD Unity Engine Room control panels (Q6) – versions prior to v12.11
  • Quantum HD Unity Interface control panels (Q5) – versions prior to v11.11
  • Quantum HD Unity Interface control panels (Q6) – versions prior to v12.11

The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.

Date modified: