Search
Find a vulnerability
Search criteria
4 vulnerabilities found for iSTAR Edge G2 by Johnson Controls
CVE-2025-43874 (GCVE-0-2025-43874)
Vulnerability from cvelistv5 – Published: 2026-11-13 21:59 – Updated: 2026-11-13 21:59
VLAI
EPSS
VEX
Summary
: Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows : OS Command Injection.
This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
Severity
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Johnson Controls | iSTAR Ultra |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra SE |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra G2 |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra G2 SE |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Edge G2 |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra SE",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra G2",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra G2 SE",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Edge G2",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": ": Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows : OS Command Injection.\u003cp\u003eThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.\u003c/p\u003e"
}
],
"value": ": Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows : OS Command Injection.\n\nThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02."
}
],
"impacts": [
{
"capecId": "CAPEC-88",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-88: OS Command Injection"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T21:59:57.409Z",
"orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
"shortName": "jci"
},
"references": [
{
"url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
"assignerShortName": "jci",
"cveId": "CVE-2025-43874",
"datePublished": "2026-11-13T21:59:57.409Z",
"dateReserved": "2025-04-17T20:07:25.122Z",
"dateUpdated": "2026-11-13T21:59:57.409Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-53700 (GCVE-0-2025-53700)
Vulnerability from cvelistv5 – Published: 2026-11-13 21:56 – Updated: 2026-11-13 21:56
VLAI
EPSS
VEX
Summary
CWE‑922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑15 File Manipulation.
This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
Severity
CWE
- CWE‑922 Insecure Storage of Sensitive Information
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Johnson Controls | iSTAR Ultra |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra SE |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra G2 |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra G2 SE |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Edge G2 |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra SE",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra G2",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra G2 SE",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Edge G2",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "CWE\u2011922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u201115 File Manipulation.\u003cp\u003eThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.\u003c/p\u003e"
}
],
"value": "CWE\u2011922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u201115 File Manipulation.\n\nThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "CAPEC\u201115 File Manipulation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE\u2011922 Insecure Storage of Sensitive Information",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T21:56:12.492Z",
"orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
"shortName": "jci"
},
"references": [
{
"url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
"assignerShortName": "jci",
"cveId": "CVE-2025-53700",
"datePublished": "2026-11-13T21:56:12.492Z",
"dateReserved": "2025-07-08T14:48:42.604Z",
"dateUpdated": "2026-11-13T21:56:12.492Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-53699 (GCVE-0-2025-53699)
Vulnerability from cvelistv5 – Published: 2026-11-13 21:50 – Updated: 2026-11-13 21:50
VLAI
EPSS
VEX
Summary
Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑554: Functionality Bypass.
This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
Severity
CWE
- CWE-1299 - Missing protection mechanism for alternate hardware interface
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Johnson Controls | iSTAR Ultra |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra SE |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra G2 |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra G2 SE |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Edge G2 |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra SE",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra G2",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra G2 SE",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Edge G2",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u2011554: Functionality Bypass.\u003cp\u003eThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.\u003c/p\u003e"
}
],
"value": "Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u2011554: Functionality Bypass.\n\nThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "CAPEC\u2011554: Functionality Bypass"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "PHYSICAL",
"baseScore": 7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1299",
"description": "CWE-1299 Missing protection mechanism for alternate hardware interface",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T21:50:56.925Z",
"orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
"shortName": "jci"
},
"references": [
{
"url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
"assignerShortName": "jci",
"cveId": "CVE-2025-53699",
"datePublished": "2026-11-13T21:50:56.925Z",
"dateReserved": "2025-07-08T14:48:42.604Z",
"dateUpdated": "2026-11-13T21:50:56.925Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-53697 (GCVE-0-2025-53697)
Vulnerability from cvelistv5 – Published: 2026-11-13 21:37 – Updated: 2026-11-13 21:41
VLAI
EPSS
VEX
Summary
Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑560: Use of Default Credentials.
This issue affects iSTAR Ultra: before 2.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
Severity
CWE
- CWE-1392 - Use of default credentials
Assigner
References
1 reference
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Johnson Controls | iSTAR Ultra |
Affected:
0 , < 2.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra SE |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra G2 |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Ultra G2 SE |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:* |
|
| Johnson Controls | iSTAR Edge G2 |
Affected:
0 , < 6.9.2.CU02
(custom)
cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "2.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra SE",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra G2",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Ultra G2 SE",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iSTAR Edge G2",
"vendor": "Johnson Controls",
"versions": [
{
"lessThan": "6.9.2.CU02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*",
"versionEndExcluding": "2.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.9.2.cu02",
"versionStartIncluding": "0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u2011560: Use of Default Credentials.\u003cp\u003eThis issue affects iSTAR Ultra: before 2.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.\u003c/p\u003e"
}
],
"value": "Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u2011560: Use of Default Credentials.\n\nThis issue affects iSTAR Ultra: before 2.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "CAPEC\u2011560: Use of Default Credentials"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1392",
"description": "CWE-1392 Use of default credentials",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-13T21:41:47.141Z",
"orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
"shortName": "jci"
},
"references": [
{
"url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
"assignerShortName": "jci",
"cveId": "CVE-2025-53697",
"datePublished": "2026-11-13T21:37:44.321Z",
"dateReserved": "2025-07-08T14:48:42.604Z",
"dateUpdated": "2026-11-13T21:41:47.141Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}