Frick Controls Quantum Hd Firmware vulnerabilities

6 known vulnerabilities in Frick Controls Quantum Hd Firmware from Johnsoncontrols. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Frick Controls Quantum HD: Insufficiently Protected Credentials

  CVE-2026-21660Feb 27, 2026Johnson Controls

  A Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or s

• 9.8 Critical severity

  Frick Controls Quantum HD: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-21659Feb 27, 2026Johnson ControlsEPSS 1.04%

  Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion (LFI) vulnerability in Johnson Controls Frick Controls Quantum HD allow an unauthenticated attacker to execute arbitrary code on the affected device, leading to full s

• 9.8 Critical severity

  Frick Controls Quantum HD: Improper Control of Generation of Code

  CVE-2026-21658Feb 27, 2026Johnson Controls

  Unauthenticated Remote Code Execution i.e Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected

• 9.8 Critical severity

  Frick Controls Quantum HD: Improper Control of Generation of Code

  CVE-2026-21657Feb 27, 2026Johnson Controls

  Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security o

• 9.8 Critical severity

  Frick Controls Quantum HD: Improper Control of Generation of Code

  CVE-2026-21656Feb 27, 2026Johnson Controls

  Improper Control of Generation of Code ('Code Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows Code Injection. Insufficient validation of input in certain parameters may permit unexpected actions, which could impact the security o

• 9.8 Critical severity

  Frick Controls Quantum HD: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-21654Feb 27, 2026Johnson ControlsEPSS 1.66%

  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows OS Command Injection. Insufficient validation of input in certain parameters may permit unexpected act