One Advisory Published – 5-27-25

Today CISA’s NCCIC-ICS published one control system security advisory for products from Johnson Controls.

Johnson Controls Advisory

This advisory describes a use of unitialized variable vulnerability in the Johnson Controls iSTAR Configuration Utility (ICU) tool. The vulnerability was reported by Reid Wightman of Dragos. Johnson Controls has a new version…