Description · from the CVE record

An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting a brute force authentication attack.

Affected

ProductAffectedFixed inSource
IQ Wifi 6< 2.0.22.0.2CNA
iq_wifi_6< 2.0.22.0.2CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jci (CNA)8.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refjohnsoncontrols.com/cyber-solutions/security-advisoriesrefcisa.gov/news-events/ics-advisories/icsa-23-206-04