CVE-2023-0954: Johnsoncontrols Illustra Pro Gen 4 Dome Firmware

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack.

Affected products

• Johnsoncontrols Illustra Pro Gen 4 Dome Firmware: up to and including ss016.05.09.04.0006
• Johnsoncontrols Illustra Pro Gen 4 Ptz Firmware: up to and including ss010.05.09.04.0022

Published 2023-06-08. Last modified 2026-06-17.