Johnson Controls Inc. iSTAR Configuration Utility (ICU) tool
view advisory published 2026-01-22
Successful exploitation of this vulnerability could allow an attacker to cause a failure within the operating system of the machine hosting the ICU tool.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-26386US | — | — | ||
Johnson Controls iSTAR Configuration Utility (ICU) has Stack-based Buffer Overflow vulnerability. This issue affects iSTAR Configuration Utility (ICU) version 6.9.7 and prior. Succ… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-26-022-04 JSONself
- ICSA Advisory ICSA-26-022-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationiSTAR Configuration Utility (ICU) Tool
Johnson Controls Inc. recommends the following:
- FixediSTAR Configuration Utility (ICU) Tool
Update the iSTAR Configuration Utility (ICU) tool to version 6.9.8
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan