IC
Product
iSTAR Configuration Utility (ICU)
by Johnson Controls · last CVE Jan 28, 2026
4
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch

Add iSTAR Configuration Utility (ICU) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-26382
9.3
1%
Apr 24
Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
Affected: before 6.9.5
CVE-2024-32752
9.1
1%
Jun 6
Johnson Controls Software House iSTAR Configuration Utility (ICU) Tool
Affected: through All
CVE-2025-26386
7.1
0%
Jan 28
Stack-based Buffer Overflow in Johnson Controls iSTAR Configuration Utility (ICU) tool
Affected: iSTAR Configuration Utility (ICU) tool version 6.9.7 and prior
CVE-2025-26383
6.3
0%
Jun 11
The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on
Affected: through All
Showing 4