Johnson Controls Inc. Airwall

Johnson Controls Inc.'s Airwall software versions 4.0.4 and earlier contain critical vulnerabilities. A hardcoded cryptographic key allows attackers to decrypt sensitive data, bypass authentication, and access arbitrary files on the system. Additionally, a path traversal vulnerability enables attackers to read sensitiv…