CVE-2023-3127

—

CVSS 3.1

9.8 critical

EPSS

<1%p45

Published

Jul 11, 2023 (Jul 11, 2023)

Modified

Jun 17, 2026

Description

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.

Vendors: johnsoncontrols
Products: istar ultra firmware, istar ultra lt firmware, istar ultra g2 firmware, edge g2 firmware
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news0 stories

No ingested article mentions this CVE yet.