← Back to browse · API

CVE-2022-21941

Severity
CRITICAL
CVSS
10.0
EPSS
0.0204
Risk score
40.71
CISA KEV
No
PoC
No
Published
2022-08-31
Modified
2024-09-17
First seen
2026-08-07
Aliases
EUVD-2022-27097, GHSA-C8HM-V577-P7V7
Products
Johnson Controls, Inc:iSTAR Ultra all versions prior to 6.8.9.CU01 <6.8.9.CU01
Sources
euvd EUVD-2022-27097

Description

All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow an unauthenticated user root access to the system.

References