Tl280
Monthly
Broken or risky cryptographic algorithm use in Johnson Controls TL280 communicator firmware exposes device communications to cryptanalytic attack, affecting all versions before 5.63. An unauthenticated network attacker who can satisfy specific attack prerequisites - most likely a man-in-the-middle network position - can achieve limited confidentiality, integrity, and availability impact against communications to and from the device. No active exploitation is confirmed (CISA KEV absent, SSVC exploitation status: none), and automatable exploitation is assessed as unlikely due to the AT:P requirement in the CVSS 4.0 vector.
Broken or risky cryptographic algorithm use in Johnson Controls TL280 communicator firmware exposes device communications to cryptanalytic attack, affecting all versions before 5.63. An unauthenticated network attacker who can satisfy specific attack prerequisites - most likely a man-in-the-middle network position - can achieve limited confidentiality, integrity, and availability impact against communications to and from the device. No active exploitation is confirmed (CISA KEV absent, SSVC exploitation status: none), and automatable exploitation is assessed as unlikely due to the AT:P requirement in the CVSS 4.0 vector.