Review – One Advisory Published – 5-27-25

Today CISA’s NCCIC-ICS published one control system security advisory for products from Johnson Controls.

Advisories

Johnson Controls Advisory - This advisory describes a use of unitialized variable vulnerability in the Johnson Controls iSTAR Configuration Utility (ICU) tool.

 

For more information on this advisory, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/one-advisory-published-5-27-25 - subscription required.