← CVE Intelligence

CVE-2024-32754

Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information PUBLISHED

Description (CNA)

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information.

Affected (CNA)

Vendor / productVersions
Johnson Controls / Kantech KT1 Door Controller, Rev01affected 0 through 2.09.10
Johnson Controls / Kantech KT2 Door Controller, Rev01affected 0 through 2.09.10
Johnson Controls / Kantech KT400 Door Controller, Rev01affected 0 through 3.01.16

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.