Filtered by vendor Johnsoncontrols Subscriptions
Filtered by product Istar Ultra Firmware Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-21941 1 Johnsoncontrols 2 Istar Ultra, Istar Ultra Firmware 2024-09-17 10 Critical
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.
CVE-2023-3127 1 Johnsoncontrols 8 Edge G2, Edge G2 Firmware, Istar Ultra and 5 more 2024-08-02 7.5 High
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.