Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pfhj-rw8h-88jh

Опубликовано: 27 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.8
CVSS3: 9.8

Описание

Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior.

Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior.

EPSS

Процентиль: 33%
0.00138
Низкий

8.8 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.8
nvd
2 месяца назад

Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security of the device before authentication occurs.This issue affects Frick Controls Quantum HD version 10.22 and prior.

EPSS

Процентиль: 33%
0.00138
Низкий

8.8 High

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-94