CVE-2024-32752

Name of the Vulnerable Software and Affected Versions: Johnson Controls Software House iStar Pro Door Controller (affected versions not specified)

Description: The issue is related to the lack of authentication for a critical function in the ICU tool and iSTAR Pro door controller, which can be exploited by a remote attacker to perform a Machine-in-the-Middle attack. This could impact door control and configuration. The attack exploits the communication between the ICU tool and the iSTAR Pro door controller.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.