Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2024-32754

Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jci

Description

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Controls Kantech KT1 Door Controller, Rev01

Default version status: unaffected

  • 0 to ≤ 2.09.10affected

Johnson Controls Kantech KT2 Door Controller, Rev01

Default version status: unaffected

  • 0 to ≤ 2.09.10affected

Johnson Controls Kantech KT400 Door Controller, Rev01

Default version status: unaffected

  • 0 to ≤ 3.01.16affected

References