Paper/Archive/CVE-2023-0954

CVE-2023-0954

Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. Illustra Pro Gen 4 Dome — Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras

EPSS 0.7%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 52.2.522 × 2010.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack.

Affected

ProductAffectedFixed inSource

Illustra Pro Gen 4 Dome≤ Illustra.SS016.05.09.04.0006–CNA

Illustra Pro Gen 4 PTZ≤ Illustra.SS010.05.09.04.0022–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

jci (CNA)8.3CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refjohnsoncontrols.com/cyber-solutions/security-advisories refcisa.gov/news-events/ics-advisories/icsa-23-159-02