Johnson Controls Istar Configuration Utility (Icu)
4 CVEs affecting Johnson Controls Istar Configuration Utility (Icu). Latest disclosed: 2026-01-28. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-32752 | Critical | 9.1 | 2024-06-06 | The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated communications with ICU, which may allow an attacker to gain… |
CVE-2025-26386 | | 2026-01-28 | Johnson Controls iSTAR Configuration Utility (ICU) has Stack-based Buffer Overflow vulnerability. This issue affects iSTAR Configuration Utility (ICU) version… | |
CVE-2025-26383 | | 2025-06-11 | The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is run… | |
CVE-2025-26382 | | 2025-04-24 | Under certain circumstances the iSTAR Configuration Utility (ICU) tool could have a buffer overflow issue |