Istar Ultra Firmware CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2023-3127

Improper Authentication in iSTAR

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Johnsoncontrols

Products

Edge G2 Edge G2 Firmware Istar Ultra and 5 more

CVE-2022-21941

iSTAR Ultra

All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.

CVSS 3.1 · 10 Critical EPSS 2.1% KEV · Not listed

Vendors

Johnsoncontrols

Products

Istar Ultra Istar Ultra Firmware

Page 1 of 1.