Johnson Controls Software House iStar Door Controller (Update A)
Successful exploitation of this vulnerability may allow an attacker to gain unauthorized access to the iSTAR Pro door controller.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-32752US | —OT elevated | — | ||
The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated
communications with ICU, which may allow an attacker to gain unauthorized access | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-24-158-04 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-158-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (3)
- MitigationSoftware House iStar Pro, Edge and eX door controllers
Aligning with CISA recommendations, Johnson Controls recommends taking steps to minimize risks to all building automation systems.
- MitigationSoftware House iStar Ultra and Ultra LT door controllers
Aligning with CISA recommendations, Johnson Controls recommends taking steps to minimize risks to all building automation systems.
- MitigationiSTAR Configuration Utility (ICU) Tool
Aligning with CISA recommendations, Johnson Controls recommends taking steps to minimize risks to all building automation systems.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan