← Database

CVE-2022-21941

CRITICAL CVSS: 10.0 Published: 2022-08-31 Modified: 2026-06-17

Description

All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.

Affected Platforms

Johnsoncontrols Istar Ultra FirmwareJohnsoncontrols Istar Ultra

Weakness Type

CWE-77, CWE-77

References