Search

Find a vulnerability

Search criteria

    1 vulnerability found for iSTAR Ultra by Johnson Controls

    CVE-2025-43874 (GCVE-0-2025-43874)

    Vulnerability from cvelistv5 – Published: 2026-11-13 21:59 – Updated: 2026-11-13 21:59
    VLAI
    Summary
    : Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows : OS Command Injection. This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
    Severity
    8.7 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command
    Assigner
    jci CNA under the icscert root
    CNA scorecard C 74/100 over 42 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Johnson Controls iSTAR Ultra Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra SE Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra G2 Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra G2 SE Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Edge G2 Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR  Ultra",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra SE",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra G2",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra G2 SE",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Edge G2",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": ": Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows : OS Command Injection.\u003cp\u003eThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.\u003c/p\u003e"
            }
          ],
          "value": ": Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows : OS Command Injection.\n\nThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88: OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T21:59:57.409Z",
        "orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
        "shortName": "jci"
      },
      "references": [
        {
          "url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
    "assignerShortName": "jci",
    "cveId": "CVE-2025-43874",
    "datePublished": "2026-11-13T21:59:57.409Z",
    "dateReserved": "2025-04-17T20:07:25.122Z",
    "dateUpdated": "2026-11-13T21:59:57.409Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}