Description
The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated
communications with ICU, which may allow an attacker to gain unauthorized access
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnson Controls | iSTAR Configuration Utility (ICU) | ≤ All | — |
| Johnson Controls | iSTAR Pro, Edge and eX | ≤ All | — |
| Johnson Controls | iSTAR Ultra and Ultra LT | < 6.6.B | 6.6.B |
Advisories 1
- ICSA-24-158-04 Johnson Controls Software House iStar Door Controller (Update A) CISA ICS & IT advisories · Jul 29, 2025