Description (CNA)
The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated communications with ICU, which may allow an attacker to gain unauthorized access
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Johnson Controls / iSTAR Configuration Utility (ICU) | affected 0 through All |
| Johnson Controls / iSTAR Pro, Edge and eX | affected 0 through All |
| Johnson Controls / iSTAR Ultra and Ultra LT | affected 0 before 6.6.B |
CWE
CWE-306
References
- https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-04
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.