Johnson Controls Inc. TL280 — ICSA-26-218-02
CISA ICS · CISA · ICSA-26-218-02
ID
ICSA-26-218-02
ICSA-26-218-02
Date
Source
CISA ICS
CISA ICS
Vendor
CISA
CISA
Threat
medium
medium
Summary
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to access sensitive information on the device. The following versions of Johnson Controls Inc. TL280 are affected: TL280 CVSS Vendor Equipment Vulnerabilities v3 4.1 Johnson Controls Inc. Johnson Controls Inc. TL280 Use of a Broken or Risky Cryptographic Algorithm Background Critical Infrastructure Sectors: Critical…
Timeline
- Published by source
- 2026-08-06
Risk context
- Reported severity or threat level: medium.
- Review exposure for the affected product or family: ICS Advisory.
Product
ICS Advisory
What to do
General, cautious steps (verify details in the official source):
- Review exposure and plan remediation based on risk and environment.
- Identify affected product versions in your inventory and verify whether you are impacted.
- Apply vendor patches/updates or recommended mitigations as soon as available.
- Read the official advisory for exact affected versions and remediation steps.
Official advisory
Evidence and provenance
- Canonical advisory ID
- ICSA-26-218-02
- Source
- CISA ICS
- Vendor
- CISA
- Published by source
- 2026-08-06
- Last source activity
- 2026-08-06
- Additional identifiers
- CVE-2026-27871
- Curated by
- hlukh.ch
Related advisories and connections
These advisories are connected by shared CVE, product, vendor, source, or time signals.