PatchTheCVEistar ultra firmware vulnerabilities and fixes
Recent CVEs affecting istar ultra firmware, with upgrade or downgrade steps. 3 tracked.
Also searched as: istarultrafirmware.
istar ultra firmware has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-07-11. Highest priority: CVE-2022-21941 (score 60/100).
- CVE-2023-3127 HIGH 7.5 UPGRADE UPGRADE An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with adm
- CVE-2022-21941 CRITICAL 10.0 UPGRADE All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow
- CVE-2017-17704 HIGH 7.4 UPGRADE A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in c
FAQ
How do I fix istar ultra firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is istar ultra firmware being exploited right now?
None of the tracked istar ultra firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which istar ultra firmware CVE should I patch first?
CVE-2022-21941 currently ranks highest (60/100): All versions of iSTAR Ultra prior to version 6.8.9.CU01 are vulnerable to a command injection that could allow.