Product · Johnson Controls

iSTAR Configuration Utility (ICU)

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.1

CVE-2025-26386

Stack-based Buffer Overflow in Johnson Controls iSTAR Configuration Utility (ICU) tool

Johnson Controls iSTAR Configuration Utility (ICU) has Stack-based Buffer Overflow vulnerability. This issue affects iSTAR Configuration Utility (ICU) version 6.9.7 and prior. Successful exploitation of this vulnerability could result in failure within the op…

Johnson Controls iSTAR Configuration Utility (ICU)

Jan 28, 2026
High 8.8

CVE-2024-32752

Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool

The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated communications with ICU, which may allow an attacker to gain unauthorized access

Johnson Controls iSTAR Configuration Utility (ICU) iSTAR Ultra and Ultra LT iSTAR Pro, Edge and eX Browsers

Jun 6, 2024