title: Quantum HD Unity
description: An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.
problem types: CWE-489: Active Debug Code
affected:
{
defaultStatus: unaffected
product: Quantum HD Unity Compressor
vendor: Johnson Controls
versions:
lessThan: 11.22, status: affected, version: 0, versionType: custom
lessThan: 12.22, status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: Quantum HD Unity AcuAir
vendor: Johnson Controls
versions:
lessThan: 11.12, status: affected, version: 0, versionType: custom
lessThan: 12.12, status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: Quantum HD Unity Condenser/Vessel
vendor: Johnson Controls
versions:
lessThan: 11.11, status: affected, version: 0, versionType: custom
lessThan: 12.11, status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: Quantum HD Unity Evaporator
vendor: Johnson Controls
versions:
lessThan: 11.11, status: affected, version: 0, versionType: custom
lessThan: 12.11, status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: Quantum HD Unity Engine Room
vendor: Johnson Controls
versions:
lessThan: 11.11, status: affected, version: 0, versionType: custom
lessThan: 12.11, status: affected, version: 0, versionType: custom
}
{
defaultStatus: unaffected
product: Quantum HD Unity Interface
vendor: Johnson Controls
versions:
lessThan: 11.11, status: affected, version: 0, versionType: custom
lessThan: 12.11, status: affected, version: 0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 10
baseSeverity: CRITICAL
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Update all Quantum HD Unity Compressor control panels to firmware version 11.22 (Q5) or 12.22 (Q6).