CVEvulnerability
CVE-2025-26383
6.3 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2025-06-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 6.3 MEDIUM — CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Weaknesses
- CWE-457
Description
The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on.
Related
Weakness · CWE (1)
- CWE-457 Use of Uninitialized Variable weakness
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-146-01 www.cisa.gov
- https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories www.johnsoncontrols.com