April 29, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
ICS: Mitsubishi Electric Corporation Vulnerability
April 25, 2025Multiple WordPress Plugins Vulnerabilities
April 25, 2025ICS: Mitsubishi Electric Corporation Vulnerability
April 25, 2025Multiple WordPress Plugins Vulnerabilities
April 25, 2025
Severity
High
Analysis Summary
CVE-2025-26382
Johnson Controls has confirmed a vulnerability impacting the Software House iSTAR Configuration Utility (ICU) tool. Under certain circumstances the iSTAR Configuration Utility (ICU) tool could have a buffer overflow issue.
Impact
- Buffer Overflow
Indicators of Compromise
CVE
- CVE-2025-26382
Affected Vendors
Johnson Controls
Affected Products
- Johnson Controls ICU - 6.9.5
Remediation
Refer to Johnson Controls Security Advisory for patch, upgrade, or suggested workaround information.
