{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Quantum HD Unity Compressor","vendor":"Johnson Controls","versions":[{"lessThan":"11.22","status":"affected","version":"0","versionType":"custom"},{"lessThan":"12.22","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Quantum HD Unity AcuAir","vendor":"Johnson Controls","versions":[{"lessThan":"11.12","status":"affected","version":"0","versionType":"custom"},{"lessThan":"12.12","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Quantum HD Unity Condenser/Vessel","vendor":"Johnson Controls","versions":[{"lessThan":"11.11","status":"affected","version":"0","versionType":"custom"},{"lessThan":"12.11","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Quantum HD Unity Evaporator","vendor":"Johnson Controls","versions":[{"lessThan":"11.11","status":"affected","version":"0","versionType":"custom"},{"lessThan":"12.11","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Quantum HD Unity Engine Room","vendor":"Johnson Controls","versions":[{"lessThan":"11.11","status":"affected","version":"0","versionType":"custom"},{"lessThan":"12.11","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Quantum HD Unity Interface","vendor":"Johnson Controls","versions":[{"lessThan":"11.11","status":"affected","version":"0","versionType":"custom"},{"lessThan":"12.11","status":"affected","version":"0","versionType":"custom"}]}],"source":"productsecurity@jci.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_compressor_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"F1B48F7F-42AA-45AA-8FC7-F93FA3136139","versionEndExcluding":"11.22","versionStartIncluding":"11.00","vulnerable":true},{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_compressor_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"2017C20F-3D16-4848-A0EF-42B4B4EBE345","versionEndExcluding":"12.22","versionStartIncluding":"12.00","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:johnsoncontrols:quantum_hd_unity_compressor:-:*:*:*:*:*:*:*","matchCriteriaId":"640BFA18-318D-41FA-BBE1-C91234A25A1B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_acuair_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A7E3C78C-D372-4CF3-BA1B-3F2DF3EDF364","versionEndExcluding":"11.12","versionStartIncluding":"11.00","vulnerable":true},{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_acuair_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"607F1C13-830D-4B8D-8BCF-42A8AEDB3147","versionEndExcluding":"12.12","versionStartIncluding":"12.00","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:johnsoncontrols:quantum_hd_unity_acuair:-:*:*:*:*:*:*:*","matchCriteriaId":"2EC4238A-8CE2-4DBE-BAE5-9E687725CCB2","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_condenser\\/vessel_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"A84D6C4C-55F8-4E99-9BFC-F1C4E554F933","versionEndExcluding":"11.11","versionStartIncluding":"11.00","vulnerable":true},{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_condenser\\/vessel_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E69F5AF9-715A-4AAB-BCB2-5B8AEE775BE6","versionEndExcluding":"12.11","versionStartIncluding":"12.00","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:johnsoncontrols:quantum_hd_unity_condenser\\/vessel:-:*:*:*:*:*:*:*","matchCriteriaId":"1139B733-1714-4111-B53C-4644A736B734","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_evaporator_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"1CE01D66-6D85-4685-87D7-CA3A8D976412","versionEndExcluding":"11.11","versionStartIncluding":"11.00","vulnerable":true},{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_evaporator_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"29520C3D-1083-47BE-9B61-652579E28867","versionEndExcluding":"12.11","versionStartIncluding":"12.00","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:johnsoncontrols:quantum_hd_unity_evaporator:-:*:*:*:*:*:*:*","matchCriteriaId":"769190A6-EF60-470F-B308-64DDD4D96C79","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_engine_room_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"02F0D946-8D1D-42E2-8C55-2D9098AFC9E2","versionEndExcluding":"11.11","versionStartIncluding":"11.00","vulnerable":true},{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_engine_room_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"C3AACE2F-4103-40FC-B1A5-79657AC808FE","versionEndExcluding":"12.11","versionStartIncluding":"12.00","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:johnsoncontrols:quantum_hd_unity_engine_room:-:*:*:*:*:*:*:*","matchCriteriaId":"BC48EFE2-04CD-491E-A127-E4F4370C202D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_interface_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"5A617CBC-3B72-46EC-B7B6-F51EFC1CD0E2","versionEndExcluding":"11.11","versionStartIncluding":"11.00","vulnerable":true},{"criteria":"cpe:2.3:o:johnsoncontrols:quantum_hd_unity_interface_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"27A27741-45EE-4F9F-98F2-260804055A19","versionEndExcluding":"12.11","versionStartIncluding":"12.00","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:johnsoncontrols:quantum_hd_unity_interface:-:*:*:*:*:*:*:*","matchCriteriaId":"3C0E1361-A1D8-43AD-B0C7-9D54049DF6A8","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed."},{"lang":"es","value":"Un usuario no autorizado podría acceder a las funciones de depuración de los productos Quantum HD Unity que quedaron expuestos accidentalmente."}],"id":"CVE-2023-4804","lastModified":"2026-06-17T06:38:37.053","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":10.0,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":6.0,"source":"productsecurity@jci.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-4804","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2023-11-18T05:00:39.237843Z","version":"2.0.3"}}]},"published":"2023-11-10T23:15:07.743","references":[{"source":"productsecurity@jci.com","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-313-01"},{"source":"productsecurity@jci.com","tags":["Vendor Advisory"],"url":"https://www.johnsoncontrols.com/cyber-solutions/security-advisories"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-313-01"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.johnsoncontrols.com/cyber-solutions/security-advisories"}],"sourceIdentifier":"productsecurity@jci.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-489"}],"source":"productsecurity@jci.com","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-Other"}],"source":"nvd@nist.gov","type":"Primary"}]}