CVE-2023-4804
Quantum HD Unity
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Quantum HD Unity
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.
- Record
CVE-2023-4804- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-489
- Updated
- 2026-11-02
EUVDEUVD-2023-54648
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.
- Record
EUVD-2023-54648- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-vw8q-rcfx-xf52
An unauthorized user could access debug features in Quantum HD Unity products that were...
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.
- Record
GHSA-vw8q-rcfx-xf52- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-489
- Updated
- 2026-11-02
NVD
An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed.
- Record
CVE-2023-4804- CVSS 3.1
- 10.0 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-489
- Updated
- 2026-11-02
Affected products
- johnson controls quantum hd unity acuair
- johnson controls quantum hd unity compressor
- johnson controls quantum hd unity condenser/vessel
- johnson controls quantum hd unity engine room
- johnson controls quantum hd unity evaporator
- johnson controls quantum hd unity interface
- johnsoncontrols quantum hd unity acuair firmware
- johnsoncontrols quantum hd unity compressor firmware
- johnsoncontrols quantum hd unity condenser\/vessel firmware
- johnsoncontrols quantum hd unity engine room firmware
- johnsoncontrols quantum hd unity evaporator firmware
- johnsoncontrols quantum hd unity interface firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-4804 is a critical vulnerability (CVSS 10.0) in Johnson Controls Quantum Hd Unity Acuair, published November 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.81%, the 57th percentile. No source names a fixed version.