Johnsoncontrols Istar Ultra Firmware
2 CVEs affecting Johnsoncontrols Istar Ultra Firmware. Latest disclosed: 2023-07-11. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-21941 | Critical | 10.0 | 2022-08-31 | All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the syste… |
CVE-2023-3127 | High | 7.5 | 2023-07-11 | An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights. |