ICSA-23-192-02

icsaUScisa_csaf_ot

Sensormatic Electronics iSTAR

view advisory published 2023-07-11

Successful exploitation of this vulnerability could allow an unauthenticated user to login to iSTAR devices with administrator rights.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-3127UScritical9.8—
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • MitigationiSTAR Edge G2

    For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2023-05.

    https://www.johnsoncontrols.com/cyber-solutions/security-advisories
  • MitigationiSTAR Ultra

    For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2023-05.

    https://www.johnsoncontrols.com/cyber-solutions/security-advisories
  • MitigationiSTAR Ultra G2

    For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2023-05.

    https://www.johnsoncontrols.com/cyber-solutions/security-advisories
  • MitigationiSTAR Ultra LT

    For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2023-05.

    https://www.johnsoncontrols.com/cyber-solutions/security-advisories
  • FixediSTAR Edge G2

    Johnson Controls recommends that users upgrade Sensormatic Elctronics iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 firmware to version 6.9.2 CUO1.

  • FixediSTAR Ultra

    Johnson Controls recommends that users upgrade Sensormatic Elctronics iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 firmware to version 6.9.2 CUO1.

  • FixediSTAR Ultra G2

    Johnson Controls recommends that users upgrade Sensormatic Elctronics iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 firmware to version 6.9.2 CUO1.

  • FixediSTAR Ultra LT

    Johnson Controls recommends that users upgrade Sensormatic Elctronics iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 firmware to version 6.9.2 CUO1.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan