A vulnerability was found in Johnson Controls FX80 and FX90 14.10.10/14.14.1. It has been classified as problematic. Affected is an unknown function of the component Device Configuration File Handler. The manipulation leads to dependency on vulnerable third-party component.

This vulnerability is traded as CVE-2025-43867. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to apply a patch to fix this issue.