CVE-2025-6173922.12.2025, 11:15Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets.EnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTNISTUNKNOWN---jciCNA------CISA-ADPADP------Base ScoreCVSS 3.xEPSS ScorePercentile: 3%Common Weakness EnumerationCWE-323 - Reusing a Nonce, Key Pair in EncryptionNonces should be used for the present occasion and only once.Referenceshttps://www.cisa.gov/news-events/ics-advisories/icsa-25-350-02https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories