CVE-2025-26383: Medium severity johnson controls inc. icu vulnerability
Published Jun 11, 2025
·Updated
The iSTAR Configuration Utility (ICU) tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on.
Affected Software
1 affected componentFixes available
: Johnson Controls Inc. ICU<6.9.5
6.9.5
Event History
Jun 11, 2025
CVE Published
via MITRE·03:36 PM
Data Sourced
via MITRE·03:36 PM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-26383?
The severity of CVE-2025-26383 is currently rated as moderate, indicating potential risk of unauthorized data exposure.
2
How do I fix CVE-2025-26383?
To fix CVE-2025-26383, update the iSTAR Configuration Utility to the latest version beyond 6.9.5.
3
What type of data is exposed by CVE-2025-26383?
CVE-2025-26383 may leak unauthorized data from the Windows PC where the iSTAR Configuration Utility is running.
4
Which version of ICU is affected by CVE-2025-26383?
CVE-2025-26383 affects the ICU version 6.9.5 and earlier.
5
Who is the vendor of the affected product in CVE-2025-26383?
The vendor of the affected product in CVE-2025-26383 is Johnson Controls Inc.