CVE-2026-21660 - Vulnerability Analysis

Overview

Frick Controls Quantum HD <= 10.22 contains a plaintext password storage vulnerability caused by hardcoded email credentials in firmware, letting attackers gain unauthorized access and expose sensitive information, exploit requires firmware access.

Severity & Score

Impact

Attackers can gain unauthorized access and expose sensitive information, potentially leading to system compromise.

Mitigation

Update to a version later than 10.22 or the latest available version.

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01
• https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner