Description (CNA)
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Johnson Controls / iSTAR Ultra | affected all versions prior to 6.8.9.CU01 before 6.8.9.CU01 |
CWE
CWE-77
References
- https://www.johnsoncontrols.com/cyber-solutions/security-advisories
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-11
ADP enrichment
No English description supplied.