iSTAR Ultra Vulnerability: Remote Control Comedy of Errors or Just a Security Nightmare?
Attention all building automation enthusiasts! Johnson Controls iSTAR Ultra models are having an OS Command Injection party, and uninvited hackers might just crash it! If your version is prior to 6.9.7.CU01 or 6.9.3, it’s time to upgrade. Keep your systems safe and sound or risk getting punk’d by cyber villains. View CSAF for the full scoop!
Hot Take:
Who knew door controllers could open up such a can of worms? It seems like iSTAR is not just a star in security but also a shooting star of vulnerabilities—aiming straight for your critical infrastructure. Maybe it’s time to upgrade those vulnerabilities to version “Nope, not today, hacker!”
Key Points:
- Johnson Controls’ iSTAR door controllers are vulnerable to OS Command Injection.
- Devices affected include various iSTAR Ultra models and iSTAR Edge G2.
- Vulnerabilities could allow full attacker control, with a CVSS score of 8.7.
- Critical sectors affected include manufacturing, government, and energy.
- Mitigations include software upgrades and improved network security practices.
Already a member? Log in here