CVEDB API

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 34.8%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2023-3127

Johnsoncontrols » Edge G2 » Version: N/A

cpe:2.3:h:johnsoncontrols:edge_g2:-
Johnsoncontrols » Istar Ultra » Version: N/A

cpe:2.3:h:johnsoncontrols:istar_ultra:-
Johnsoncontrols » Istar Ultra G2 » Version: N/A

cpe:2.3:h:johnsoncontrols:istar_ultra_g2:-
Johnsoncontrols » Istar Ultra Lt » Version: N/A

cpe:2.3:h:johnsoncontrols:istar_ultra_lt:-
Johnsoncontrols » Edge G2 Firmware » Version: N/A

cpe:2.3:o:johnsoncontrols:edge_g2_firmware:-
Johnsoncontrols » Edge G2 Firmware » Version: 6.9.2

cpe:2.3:o:johnsoncontrols:edge_g2_firmware:6.9.2
Johnsoncontrols » Istar Ultra Firmware » Version: 6.8.6

cpe:2.3:o:johnsoncontrols:istar_ultra_firmware:6.8.6
Johnsoncontrols » Istar Ultra Firmware » Version: 6.8.9.cu01

cpe:2.3:o:johnsoncontrols:istar_ultra_firmware:6.8.9.cu01
Johnsoncontrols » Istar Ultra Firmware » Version: 6.9.2

cpe:2.3:o:johnsoncontrols:istar_ultra_firmware:6.9.2
Johnsoncontrols » Istar Ultra G2 Firmware » Version: N/A

cpe:2.3:o:johnsoncontrols:istar_ultra_g2_firmware:-
Johnsoncontrols » Istar Ultra G2 Firmware » Version: 6.9.2

cpe:2.3:o:johnsoncontrols:istar_ultra_g2_firmware:6.9.2
Johnsoncontrols » Istar Ultra Lt Firmware » Version: 6.8.6

cpe:2.3:o:johnsoncontrols:istar_ultra_lt_firmware:6.8.6
Johnsoncontrols » Istar Ultra Lt Firmware » Version: 6.9.2

cpe:2.3:o:johnsoncontrols:istar_ultra_lt_firmware:6.9.2