{"id":"CVE-2024-32754","state":"PUBLISHED","title":"Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information","description":"Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version.  Once configured, the controller will no longer broadcast this information.","publishedAt":"2024-07-04T10:43:46.161Z","updatedAt":"2025-08-27T20:42:54.379Z","severity":{"score":3.1,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"jci"},"assigner":"jci","products":["Johnson Controls Kantech KT1 Door Controller, Rev01","Johnson Controls Kantech KT2 Door Controller, Rev01","Johnson Controls Kantech KT400 Door Controller, Rev01"],"affected":[{"vendor":"Johnson Controls","product":"Kantech KT1 Door Controller, Rev01","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"2.09.10","versionType":"custom"}]},{"vendor":"Johnson Controls","product":"Kantech KT2 Door Controller, Rev01","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"2.09.10","versionType":"custom"}]},{"vendor":"Johnson Controls","product":"Kantech KT400 Door Controller, Rev01","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"3.01.16","versionType":"custom"}]}],"references":["https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories","https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-01"],"weaknesses":["CWE-200"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/32xxx/CVE-2024-32754.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-32754","state":"PUBLISHED","datePublished":"2024-07-04T10:43:46.161Z","dateUpdated":"2025-08-27T20:42:54.379Z","assignerShortName":"jci","assignerOrgId":"7281d04a-a537-43df-bfb4-fa4110af9d01","dateReserved":"2024-04-17T17:26:35.180Z"},"containers":{"cna":{"title":"Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information","descriptions":[{"lang":"en","value":"Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version.  Once configured, the controller will no longer broadcast this information."}],"affected":[{"vendor":"Johnson Controls","product":"Kantech KT1 Door Controller, Rev01","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"2.09.10","versionType":"custom"}]},{"vendor":"Johnson Controls","product":"Kantech KT2 Door Controller, Rev01","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"2.09.10","versionType":"custom"}]},{"vendor":"Johnson Controls","product":"Kantech KT400 Door Controller, Rev01","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"3.01.16","versionType":"custom"}]}],"references":[{"url":"https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-01"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","description":"CWE-200: Exposure of Sensitive Information to an Unauthorized Actor","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"jci","orgId":"7281d04a-a537-43df-bfb4-fa4110af9d01","dateUpdated":"2024-07-04T10:46:41.686Z"},"credits":[{"lang":"en","type":"finder","value":"National Computer Emergency Response Team (CERT) of India"}],"datePublic":"2024-07-02T16:30:00.000Z","impacts":[{"capecId":"CAPEC-117","descriptions":[{"lang":"en","value":"CAPEC-117: Interception"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"\n\n<p>Update Kantech door controllers as follows:</p><ul><li><p>Update Kantech KT1 Door Controller to at least version 3.10.12</p></li><li><p>Update Kantech KT2 Door Controller to at least version 3.10.12</p></li><li><p>Update Kantech KT400 Door Controller to at least version 3.03</p></li></ul>"}],"value":"Update Kantech door controllers as follows:\n\n  *  Update Kantech KT1 Door Controller to at least version 3.10.12\n\n\n  *  Update Kantech KT2 Door Controller to at least version 3.10.12\n\n\n  *  Update Kantech KT400 Door Controller to at least version 3.03"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-32754","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-07-05T19:54:50.619118Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-08-27T20:42:54.379Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories","tags":["x_transferred"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-01","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T02:20:35.575Z"}}]}}}