GCVE - cpe:2.3:h:johnsoncontrols:software_house_istar_pro_door

Approved changes feed: RSS · Atom

cpe:2.3:h:johnsoncontrols:software_house_istar_pro_door_controller:*:*:*:*:*:*:*:*

part: h version: * update: *

Vendor	Johnsoncontrols (`3e1d627f-81d6-5827-bd4a-3f77847762e4`)
Product	Software House Istar Pro Door Controller (`fb3ef5ed-da21-5ff8-b269-4afa14a1a8e0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-32752`	vulnerable	2026-06-08 06:37:23.777793	Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated communications with ICU, which may allow an attacker to gain unauthorized access Published: 2024-06-06T20:49:53.476Z Updated: 2025-04-24T20:05:35.350Z Open on db.gcve.eu Reference links https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-04	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.