{"affected":[{"defaultStatus":"unaffected","product":"FX Server","source":"CNA: jci","vendor":"Johnson Controls","versions":[{"lessThan":"14.10.10","status":"affected","version":"0","versionType":"custom"},{"lessThan":"14.14.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"FX80","source":"CNA: jci","vendor":"Johnson Controls","versions":[{"lessThan":"14.14.10","status":"affected","version":"0","versionType":"custom"},{"lessThan":"14.14.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"FX90","source":"CNA: jci","vendor":"Johnson Controls","versions":[{"lessThan":"14.10.10","status":"affected","version":"0","versionType":"custom"},{"lessThan":"14.14.1","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2025-43867","cwes":["CWE-1395"],"description":"- Dependency on Vulnerable Third-Party Component vulnerability in Johnson Controls FX Server, Johnson Controls FX80, and Johnson Controls FX90 allows CAPEC‑17: Accessing, Modifying or Deleting Files.\n\nThis issue affects FX Server: before 14.10.10 and before 14.14.1; FX80: before 14.14.10 and before 14.14.1; FX90: before 14.10.10 and before 14.14.1.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.5,"severity":"high","source":"CNA: jci","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H","version":"4.0"}],"modifiedAt":1794605253159,"publishedAt":1794600856172,"references":[{"source":"CNA: jci","tags":[],"url":"https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"}],"remediation":[],"revision":"a656b84e23adef7e461cad226b944bfdd821489146794b309aee5ff2496e6e27","sources":[{"modifiedAt":1794605253159,"name":"CNA: jci","retrievedAt":1794607702265,"url":"https://www.cve.org/CVERecord?id=CVE-2025-43867"}],"ssvc":{"assessedAt":1794605006021,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2025-43867","updatedAt":1794607702265}