CVE-2024-32754

LowCVSS 3.1/10Last modified Jun 17, 2026

Description

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information.

Metrics

CVSS 3.1 3.1/10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
Johnson ControlsKantech KT1 Door Controller, Rev01<= 2.09.10
Johnson ControlsKantech KT2 Door Controller, Rev01<= 2.09.10
Johnson ControlsKantech KT400 Door Controller, Rev01<= 3.01.16

References

Timeline

Published
Jul 4, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-327559.1Under certain circumstances the web interface will accept characters unrelated to the expected input.CVE-2024-327566.8Under certain circumstances the Linux users credentials may be recovered by an authenticated user.CVE-2024-327576.8Under certain circumstances unnecessary user details are provided within system logsCVE-2024-327587.5Under certain circumstances the communication between exacqVision Client and exacqVision Server will use insufficient key length and exchangCVE-2024-327597.7Under certain circumstances the Software House C●CURE 9000 installer will utilize weak credentials.CVE-2024-32764.8The Lightbox & Modal Popup WordPress Plugin WordPress plugin before 2.7.28, foobox-image-lightbox-premium WordPress plugin before 2.7.28 doCVE-2024-327606.5When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker prCVE-2024-327616.5Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants running on VELOS and rSeriesCVE-2024-327626.1A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inCVE-2024-327638.8A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-327649.9A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability cCVE-2024-327654.2A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated admini
CVE-2024-32754: Low severity, CVSS 3.1 | Vulnix