CVE-2024-0242

HIGH

Qolsys IQ Panel 4 and IQ4 Hub Firmware < 4.4.2 - Unauthorized Access to Settings

Title source: llm

Under certain circumstances IQ Panel4 and IQ4 Hub panel software prior to version 4.4.2 could allow unauthorized access to settings.

Core 2

Core References

Third Party Advisory, US Government Resource

Product

CVSS v3 7.3

EPSS 0.0059

EPSS Percentile 43.5%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-200

Status published

Products (2)

johnsoncontrols/qolsys_iq4_hub_firmware < 4.4.2

johnsoncontrols/qolsys_iq_panel_4_firmware < 4.4.2

Published Feb 08, 2024

Tracked Since Feb 18, 2026