Information security
fromSecurityWeek
14 hours agoHoneywell, Researcher Clash Over Impact of Building Controller Vulnerability
A researcher discovered that Honeywell's IQ4 building controller exposes unauthenticated web interfaces and allows remote administrator account creation, but Honeywell disputes the severity, claiming the vulnerability only exists during installation before the system becomes operational.