Johnson Controls Software House iStar Door Controller (Update A)
Successful exploitation of this vulnerability may allow an attacker to gain unauthorized access to the iSTAR Pro door controller.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-32752US | —OT erhöht | — | ||
The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated
communications with ICU, which may allow an attacker to gain unauthorized access | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-158-04 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-158-04 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (3)
- MitigationSoftware House iStar Pro, Edge and eX door controllers
Aligning with CISA recommendations, Johnson Controls recommends taking steps to minimize risks to all building automation systems.
- MitigationSoftware House iStar Ultra and Ultra LT door controllers
Aligning with CISA recommendations, Johnson Controls recommends taking steps to minimize risks to all building automation systems.
- MitigationiSTAR Configuration Utility (ICU) Tool
Aligning with CISA recommendations, Johnson Controls recommends taking steps to minimize risks to all building automation systems.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan