VYPR
← All advisories
High severity7.5NVD Advisory· Published Jul 11, 2023· Updated Jun 17, 2026

CVE-2023-3127

CVE-2023-3127

Description

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Johnsoncontrols/Edge G2 Firmware2 versions
    cpe:2.3:o:johnsoncontrols:edge_g2_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:johnsoncontrols:edge_g2_firmware:*:*:*:*:*:*:*:*range: <6.9.2
    • cpe:2.3:o:johnsoncontrols:edge_g2_firmware:6.9.2:-:*:*:*:*:*:*
  • Johnsoncontrols/Istar Ultra Firmware2 versions
    cpe:2.3:o:johnsoncontrols:istar_ultra_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:johnsoncontrols:istar_ultra_firmware:*:*:*:*:*:*:*:*range: >=6.8.6,<6.9.2
    • cpe:2.3:o:johnsoncontrols:istar_ultra_firmware:6.9.2:-:*:*:*:*:*:*
  • Johnsoncontrols/Istar Ultra G2 Firmware2 versions
    cpe:2.3:o:johnsoncontrols:istar_ultra_g2_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:johnsoncontrols:istar_ultra_g2_firmware:*:*:*:*:*:*:*:*range: <6.9.2
    • cpe:2.3:o:johnsoncontrols:istar_ultra_g2_firmware:6.9.2:-:*:*:*:*:*:*
  • Johnsoncontrols/Istar Ultra Lt Firmware2 versions
    cpe:2.3:o:johnsoncontrols:istar_ultra_lt_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:johnsoncontrols:istar_ultra_lt_firmware:*:*:*:*:*:*:*:*range: >=6.8.6,<6.9.2
    • cpe:2.3:o:johnsoncontrols:istar_ultra_lt_firmware:6.9.2:-:*:*:*:*:*:*
  • Johnson Controls/iSTAR Ultrallm-create
  • Johnson Controls/iSTAR Edge G2llm-fuzzy

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.