vulnerability
Johnson Controls Inc. TL280
Critical
Summary
A critical vulnerability (CWE-327) exists in Johnson Controls Inc.'s TL280 firmware, allowing attackers to access sensitive information on the device. The vulnerability stems from hardcoded credentials embedded directly in the firmware. Affected versions include TL280 < 5.63, and the device is deployed worldwide. Johnson Controls recommends applying firmware update 5.63 and implementing network segmentation and restricted access to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data