Description
The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Johnson Controls | iSTAR Configuration Utility (ICU) | ≤ All | — |
Advisories 1
- ICSA-25-146-01 Johnson Controls iSTAR Configuration Utility (ICU) tool CISA ICS & IT advisories · May 27, 2025