Severity
High
Analysis Summary
CVE-2025-26382
Johnson Controls has confirmed a vulnerability impacting the Software House iSTAR Configuration Utility (ICU) tool. Under certain circumstances the iSTAR Configuration Utility (ICU) tool could have a buffer overflow issue.
Impact
- Buffer Overflow
Indicators of Compromise
CVE
- CVE-2025-26382
Affected Vendors
Johnson Controls
Affected Products
- Johnson Controls ICU - 6.9.5
Remediation
Refer to Johnson Controls Security Advisory for patch, upgrade, or suggested workaround information.