Johnsoncontrols: >> Istar Ultra Firmware Security Vulnerabilities
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-07-11
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.
CVSS Score
10.0
EPSS Score
0.026
Published
2022-08-31