Johnson Controls Kantech Gen1 ioSmart

Risk Summary

An attacker with physical access to the Kantech Gen1 ioSmart card reader in certain circumstances can recover the reader's communication memory between the card and reader.

CVEs (1)

Remediations

• Johnson Controls recommends users update their Kantech Gen1 ioSmart card reader firmware to version 1.7.2 or higher.
• Johnson Controls also makes the following recommendations and wishes to provide the following information:
• Contact technical support for additional information.
• ioSmart Gen2 card readers are not affected by this vulnerability.
• Users should contact their local sales representative for ordering information.
• For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2023-03 v1. Further ICS security notices and product security guidelines can also be found at this website.

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing