CVE-2025-26382

Under certain circumstances the iSTAR Configuration Utility ICU tool could have a buffer overflow issue...

CVE-2024-32752

The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated communications with ICU, which may allow an attacker to gain unauthorized access...

CVE-2025-26382

Under certain circumstances the iSTAR Configuration Utility ICU tool could have a buffer overflow issue...

CVE-2025-26382 Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool

Under certain circumstances the iSTAR Configuration Utility ICU tool could have a buffer overflow issue...

CVE-2025-26382

Johnson Controls iSTAR Configuration Utility (ICU) Tool is affected by CVE-2025-26382 due to a buffer overflow under certain circumstances. The tool/process can lead to arbitrary code execution with high impact to confidentiality, integrity, and availability, per CVSS metrics (CRITICAL, network a...

CVE-2025-26382 Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool

Under certain circumstances the iSTAR Configuration Utility ICU tool could have a buffer overflow issue...

Johnson Controls iSTAR Configuration Utility 安全漏洞

The Johnson Controls iSTAR Configuration Utility is a software tool for configuring and managing iSTAR Controllers from Johnson Controls, Inc. A security vulnerability exists in the Johnson Controls iSTAR Configuration Utility that originates from a buffer overflow issue...

PT-2025-17851 · Unknown · Istar Configuration Utility

Name of the Vulnerable Software and Affected Versions: iSTAR Configuration Utility ICU affected versions not specified Description: The issue is related to a buffer overflow that could occur under certain circumstances in the iSTAR Configuration Utility ICU tool. Recommendations: At the moment,...

CVE-2024-32752

The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated communications with ICU, which may allow an attacker to gain unauthorized access...

CVE-2024-32752 Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool

The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated communications with ICU, which may allow an attacker to gain unauthorized access...

CVE-2024-32752 Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool

The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated communications with ICU, which may allow an attacker to gain unauthorized access...

CVE-2024-32752

The CVE-2024-32752 issue affects Johnson Controls Software House iStar Pro Door Controller and ICU (ICU tool) with firmware prior to 6.6.B. The root cause is Missing Authentication for Critical Functions in the ICU–door controller communications, enabling potential machine-in-the-middle attacks t...

Johnson Controls Software House iStar Door Controller (Update A)

View CSAF 1. EXECUTIVE SUMMARY CVSS 4 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Johnson Controls Inc. Equipment : Software House iStar Pro Door Controller, ICU Vulnerability : Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this...

PT-2024-5077 · Johnson Controls · Istar Pro Door Controller

Name of the Vulnerable Software and Affected Versions: Johnson Controls Software House iStar Pro Door Controller affected versions not specified Description: The issue is related to the lack of authentication for a critical function in the ICU tool and iSTAR Pro door controller, which can be...

Johnson Controls Software House iStar Pro Door Controller Security Vulnerability

Johnson Controls Software House iStar Pro Door Controller is an access control device from Johnson Controls, Inc. A security vulnerability exists in the Johnson Controls Software House iStar Pro Door Controller that stems from vulnerability to man-in-the-middle attacks that could affect door...

CVE-2023-3127

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...

CVE-2023-3127

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...

Code injection

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...

CVE-2023-3127 Improper Authentication in iSTAR

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...

CVE-2023-3127 Improper Authentication in iSTAR

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...