CVE-2024-32754

{"id": "CVE-2024-32754", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "productsecurity@jci.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.6}]}, "published": "2024-07-04T11:15:10.400", "references": [{"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-01", "source": "productsecurity@jci.com"}, {"url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories", "source": "productsecurity@jci.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "productsecurity@jci.com", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information."}, {"lang": "es", "value": "En determinadas circunstancias, cuando el controlador est\u00e1 en modo de restablecimiento de f\u00e1brica esperando la configuraci\u00f3n inicial, transmitir\u00e1 su direcci\u00f3n MAC, n\u00famero de serie y versi\u00f3n de firmware. Una vez configurado, el controlador ya no transmitir\u00e1 esta informaci\u00f3n."}], "lastModified": "2024-07-05T12:55:51.367", "sourceIdentifier": "productsecurity@jci.com"}