iSTAR Pro Door Controller Vulnerable to Machine-in-the-Middle Attacks
CVE-2024-32752

8.8HIGH

What is CVE-2024-32752?

The iSTAR Pro Door Controller by Johnson Controls is vulnerable to Machine-in-the-Middle attacks, which can compromise the integrity of communications between the controller and the ICU tool. This vulnerability could lead to unauthorized access and manipulation of door control and configuration settings, posing serious security risks. It is essential for users to be aware of this vulnerability to implement effective security measures.

Affected Version(s)

iSTAR Configuration Utility (ICU) 0

iSTAR Pro, Edge and eX 0

iSTAR Ultra and Ultra LT 0

References

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Reid Wightman of Dragos
.
CVE-2024-32752 : iSTAR Pro Door Controller Vulnerable to Machine-in-the-Middle Attacks