CVE Feed

    Dashboard / CVE / CVE-2023-4804

    CVE-2023-4804

    An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.

    Published:Nov 10, 2023
    Last Modified:Dec 16, 2025
    EPS:Nov 10, 2023
    EPSS Score:0.00105
    CVSS Score:10

    Affected Products

    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Acuair
    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Acuair Firmware
    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Compressor
    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Compressor Firmware
    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Condenser\/vessel
    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Condenser\/vessel Firmware
    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Engine Room
    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Engine Room Firmware
    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Evaporator
    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Evaporator Firmware
    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Interface
    Vendor
    Johnsoncontrols
    Product
    Quantum Hd Unity Interface Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-489 Active Debug Code

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High