BaseFortify

Publication date: 2025-12-22

Last updated on: 2025-12-23

Assigner: Johnson Controls

Description

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-22

Last Modified

2025-12-23

Generated

2026-07-06

AI Q&A

2025-12-22

EPSS Evaluated

2026-07-05

NVD

CVE-2025-61739

EUVD

EUVD-2025-204703

Affected Vendors & Products

Vendor	Product	Version / Range
johnson_controls	building_management_systems	4.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-323	Nonces should be used for the present occasion and only once.

Attack-Flow Graph

Executive Summary

This vulnerability is caused by Nonce reuse, which allows attackers to perform replay attacks or decrypt captured packets.

Impact Analysis

The vulnerability can impact you by enabling attackers to replay valid data transmissions or decrypt sensitive information from captured packets, potentially compromising the confidentiality and integrity of your communications.

Hi! I’m here to help you understand CVE-2025-61739. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70