Vulnerability Details CVE-2022-21941
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.027
EPSS Ranking 85.4%
CVSS Severity
CVSS v3 Score 10.0
References
Products affected by CVE-2022-21941
-
cpe:2.3:h:johnsoncontrols:istar_ultra:-
-
cpe:2.3:o:johnsoncontrols:istar_ultra_firmware:-
-
cpe:2.3:o:johnsoncontrols:istar_ultra_firmware:6.8.6