{"id":"CVE-2024-32752","state":"PUBLISHED","title":"Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool","description":"The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated\ncommunications with ICU, which may allow an attacker to gain unauthorized access","publishedAt":"2024-06-06T20:49:53.476Z","updatedAt":"2025-04-24T20:05:35.350Z","severity":{"score":8.8,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","source":"jci"},"assigner":"jci","products":["Johnson Controls iSTAR Configuration Utility (ICU)","Johnson Controls iSTAR Pro, Edge and eX","Johnson Controls iSTAR Ultra and Ultra LT"],"affected":[{"vendor":"Johnson Controls","product":"iSTAR Configuration Utility (ICU)","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"All","versionType":"custom"}]},{"vendor":"Johnson Controls","product":"iSTAR Pro, Edge and eX","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"All","versionType":"custom"}]},{"vendor":"Johnson Controls","product":"iSTAR Ultra and Ultra LT","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"6.6.B","versionType":"custom"}]}],"references":["https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories","https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-04","https://www.johnsoncontrols.com/-/media/jci/cyber-solutions/product-security-advisories/2024/jci-psa-2024-06.pdf"],"weaknesses":["CWE-306"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/32xxx/CVE-2024-32752.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-32752","state":"PUBLISHED","datePublished":"2024-06-06T20:49:53.476Z","dateUpdated":"2025-04-24T20:05:35.350Z","assignerShortName":"jci","assignerOrgId":"7281d04a-a537-43df-bfb4-fa4110af9d01","dateReserved":"2024-04-17T17:26:35.180Z"},"containers":{"cna":{"title":"Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool","descriptions":[{"lang":"en","value":"The iSTAR door controllers running firmware prior to version 6.6.B, does not support authenticated\ncommunications with ICU, which may allow an attacker to gain unauthorized access"}],"affected":[{"vendor":"Johnson Controls","product":"iSTAR Configuration Utility (ICU)","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"All","versionType":"custom"}]},{"vendor":"Johnson Controls","product":"iSTAR Pro, Edge and eX","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"All","versionType":"custom"}]},{"vendor":"Johnson Controls","product":"iSTAR Ultra and Ultra LT","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"6.6.B","versionType":"custom"}]}],"references":[{"url":"https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-04"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.8,"baseSeverity":"HIGH","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-306","description":"CWE-306: Missing Authentication for Critical Function","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"jci","orgId":"7281d04a-a537-43df-bfb4-fa4110af9d01","dateUpdated":"2025-04-24T20:05:35.350Z"},"credits":[{"lang":"en","type":"finder","value":"Reid Wightman"}],"datePublic":"2025-04-24T16:00:00.000Z","impacts":[{"capecId":"CAPEC-248","descriptions":[{"lang":"en","value":"CAPEC-248: Command Injection"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"• Replace the iSTAR Pro, Edge and eX door controllers with a current generation iSTAR door controller (such\nas iSTAR Ultra G2) which supports authentication and prevents the ICU from making configuration\nchanges.\n<br>• Ensure your iSTAR Ultra and Ultra LT door controllers are running firmware 6.6.B or greater. \n\n<br>"}],"value":"• Replace the iSTAR Pro, Edge and eX door controllers with a current generation iSTAR door controller (such\nas iSTAR Ultra G2) which supports authentication and prevents the ICU from making configuration\nchanges.\n\n• Ensure your iSTAR Ultra and Ultra LT door controllers are running firmware 6.6.B or greater."}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"johnsoncontrols","product":"software_house_istar_pro_door_controller","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}],"cpes":["cpe:2.3:h:johnsoncontrols:software_house_istar_pro_door_controller:*:*:*:*:*:*:*:*"]},{"vendor":"johnsoncontrols","product":"icu","defaultStatus":"unaffected","versions":[{"version":"all","status":"affected"}],"cpes":["cpe:2.3:h:johnsoncontrols:icu:*:*:*:*:*:*:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-06-07T16:00:39.441305Z","id":"CVE-2024-32752","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-07T16:15:20.239Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.johnsoncontrols.com/-/media/jci/cyber-solutions/product-security-advisories/2024/jci-psa-2024-06.pdf","tags":["x_transferred"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-158-04","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T02:20:35.187Z"}}]}}}