Known vulnerabilities in iSTAR Configuration Utility (ICU)

Vendor: Johnson Controls
Software: iSTAR Configuration Utility (ICU)
Software CPE: cpe:2.3:h:johnson_controls:icu:*:*:*:*:*:*:*:*
Website: https://www.johnsoncontrols.com/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iSTAR Configuration Utility (ICU) iSTAR Configuration Utility (ICU) is affected by 3 known vulnerabilities: 2 high, 1 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109886 - Use of Uninitialized Variable
CVE-2025-26383		 CWE-457 Medium
No
No
 6.9.5 28.05.2025 SB2025052806
#VU107938 - Stack-based buffer overflow
CVE-2025-26382		 CWE-121 High
No
No
 6.9.5 25.04.2025 SB2025042507
#VU91275 - Missing Authentication for Critical Function
CVE-2024-32752		 CWE-306 High
No
No
 - 07.06.2024 SB2024060715