What’s Vulnerable › Vulnerabilities

CVE-2021-27662: KT-1 Capture-replay

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-15 · updated 2026-06-17
• Weakness: CWE-294

Description

The KT-1 door controller is susceptible to replay or man-in-the-middle attacks where an attacker can record and replay TCP packets. This issue affects Johnson Controls KT-1 all versions up to and including 3.01

Affected products

• Johnson Controls KT-1: through 3.01

References

• https://us-cert.gov/ics/advisories
• https://www.johnsoncontrols.com/cyber-solutions/security-advisories
• https://us-cert.gov/ics/advisories
• https://www.johnsoncontrols.com/cyber-solutions/security-advisories

Get alerted when CVE-2021-27662 or the next vulnerability affects your stack