PT-2025-52642 · Johnson Controls · Iq Panels2

James Chambers · Published 2025-12-22 · Updated 2025-12-22 · CVE-2025-61739

Positive Technologies (AI Summary)

CVSS v4.0

7.2

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description A flaw exists due to nonce reuse, potentially allowing attackers to conduct reply attacks or decrypt captured packets. This could compromise the confidentiality and integrity of communications.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-323

Related Identifiers

CVE-2025-61739

Affected Products

Iq Panels2

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-61739 · Security Note
• https://twitter.com/CVEnew/status/2003198591997767758 · Twitter Post
• https://johnsoncontrols.com/trust-center/cybersecurity/security-advisories · Note
• https://t.me/CVEtracker/40407 · Telegram Post
• https://t.me/cveNotify/146514 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-350-02 · Note
• https://twitter.com/VulmonFeeds/status/2003068150435164272 · Twitter Post