high7.5
CVE-2023-3127
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.
Impact
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Johnsoncontrols | Istar Ultra Firmware | from 6.8.6 before 6.9.2 Version 6.9.2 |
| Johnsoncontrols | Istar Ultra Lt Firmware | from 6.8.6 before 6.9.2 Version 6.9.2 |
| Johnsoncontrols | Istar Ultra G2 Firmware | before 6.9.2 Version 6.9.2 |
| Johnsoncontrols | Edge G2 Firmware | before 6.9.2 Version 6.9.2 |