← Back

Istar Ultra Firmware

istar_ultra_firmware

Vendor: Johnsoncontrols • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-3127
1Johnsoncontrols
4Edge G2 Firmware
Istar Ultra FirmwareIstar Ultra G2 Firmware+1 more
Jun 17, 2026
Jul 11, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.
CVE-2022-21941
1Johnsoncontrols
1Istar Ultra Firmware
Jun 17, 2026
Aug 31, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.