Rewterz
Rewterz Threat Advisory – ICS : Delta Electronics DOPSoft Vulnerabilities
September 13, 2021
Rewterz
Rewterz Threat Advisory – ICS : Mitsubishi Electric Europe B.V. smartRTU and INEA ME-RTU
September 13, 2021

Rewterz Threat Advisory – ICS : Johnson Controls Kantech KT-1 Door Controller

Severity

Medium

Analysis Summary

CVE-2021-27662

Johnson Controls Kantech KT-1 Door Controller is vulnerable to a man-in-the-middle attack, caused by an unspecified flaw. An attacker could exploit this vulnerability to launch a man-in-the-middle attack and gain access to the communication channel between endpoints to obtain sensitive information or perform replay attack.

Impact

  • Unauthorized Access

Affected Vendors

  • Johnson Controls

Affected Products

  • Johnson Controls Kantech KT-1 Door Controller

Remediation

Refer to Johnson Controls for patch, upgrade, or suggested workaround information.

https://www.johnsoncontrols.com/-/media/jci/cyber-solutions/product-security-advisories/2021/jci-psa-2021-14_-kantech-kt-1-fathom5.pdf?la=en&hash=1FDCE7722EF88D0B15C79BB76ECC6A9DA084D76F