Istar Ultra Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:johnsoncontrols:istar_ultra_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Johnsoncontrols (3e1d627f-81d6-5827-bd4a-3f77847762e4) |
|---|---|
| Product | Istar Ultra Firmware (bea019bf-2d9b-5483-afe4-82093b81e3f2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-3127 |
vulnerable | 2026-06-08 06:09:38.620216 |
Improper Authentication in iSTAR
HIGH (7.5)
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.
Published: 2023-07-11T21:06:29.003Z
Updated: 2024-10-22T20:31:09.969Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-21941 |
vulnerable | 2026-06-08 05:40:03.390827 |
iSTAR Ultra
CRITICAL (10)
All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.
Published: 2022-08-31T15:59:33.979Z
Updated: 2024-09-17T01:51:30.183Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.