vulnerability
Johnson Controls Inc. Airwall
High
Summary
Johnson Controls Inc.'s Airwall software versions 4.0.4 and earlier contain critical vulnerabilities. A hardcoded cryptographic key allows attackers to decrypt sensitive data, bypass authentication, and access arbitrary files on the system. Additionally, a path traversal vulnerability enables attackers to read sensitive configuration files and source code. Successful exploitation could lead to significant data compromise and system disruption, particularly impacting critical infrastructure sectors.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data