CVE:CVE-2023-3127
CNNVD:CNNVD-202307-960
Johnson Controls iSTAR Ultra是美国江森自控（Johnson Controls）公司的一款门控制器。提供网络弹性和更快的处理速度。
Johnson Controls iSTAR Ultra、iSTAR Ultra LT、iSTAR Ultra G2 和 iSTAR Edge G2 存在安全漏洞，该漏洞源于未经身份验证的用户可以使用管理员权限登录。
solution:Upgrade johnsoncontrols istar_ultra_firmware to a higher version than 6.9.2,6.9.2,and avoid the version [6.8.6,6.9.2),6.9.2; Upgrade johnsoncontrols istar_ultra_lt_firmware to a higher version than 6.9.2,6.9.2,and avoid the version [6.8.6,6.9.2),6.9.2; Upgrade johnsoncontrols istar_ultra_g2_firmware to a higher version than 6.9.2,6.9.2,and avoid the version (,6.9.2),6.9.2; Upgrade johnsoncontrols edge_g2_firmware to a higher version than 6.9.2,6.9.2,and avoid the version (,6.9.2),6.9.2