Johnson Controls Inc. iSTAR Configuration Utility (ICU) tool

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to cause a failure within the operating system of the machine hosting the ICU tool.

CVEs (1)

Remediations

• Johnson Controls Inc. recommends the following:
• Update the iSTAR Configuration Utility (ICU) tool to version 6.9.8
• For more detailed mitigation instructions, please see Johnson Controls Product Security Advisory JCI-PSA-2025-08 v1 at the following location: https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Affected Vendors

Affected Products (1)

Affected Sectors

Commercial Facilities, Critical Manufacturing, Energy, Government Services and Facilities, Transportation Systems