Istar Configuration Utility (Icu)
Approved changes feed: RSS · Atom
cpe:2.3:a:johnson_controls:istar_configuration_utility_(icu):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Johnson Controls (9b52300a-5581-5d6d-8a56-383dd393de0f) |
|---|---|
| Product | Istar Configuration Utility (Icu) (49a4d7f8-5452-5a72-86e4-af703de56549) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-26386 |
vulnerable | 2026-06-08 07:12:51.577421 |
Stack-based Buffer Overflow in Johnson Controls iSTAR Configuration Utility (ICU) tool
Johnson Controls iSTAR Configuration Utility (ICU) has Stack-based Buffer Overflow vulnerability. This issue affects iSTAR Configuration Utility (ICU) version 6.9.7 and prior. Successful exploitation of this vulnerability could result in failure within the operating system of the machine hosting the ICU tool.
Published: 2026-01-28T11:24:46.317Z
Updated: 2026-01-28T15:49:08.575Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26383 |
vulnerable | 2026-06-08 07:12:51.575207 |
Details available
The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on.
Published: 2025-06-11T15:36:41.067Z
Updated: 2025-06-11T15:52:19.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26382 |
vulnerable | 2026-06-08 07:12:51.574855 |
Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
Under certain circumstances the iSTAR Configuration Utility (ICU) tool could have a buffer overflow issue
Published: 2025-04-24T19:47:33.187Z
Updated: 2025-04-24T20:09:50.934Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32752 |
vulnerable | 2026-06-08 06:37:23.779289 |
Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated
communications with ICU, which may allow an attacker to gain unauthorized access
Published: 2024-06-06T20:49:53.476Z
Updated: 2025-04-24T20:05:35.350Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.