Search

Find a vulnerability

Search criteria

    5 vulnerabilities found for iSTAR Ultra SE by Johnson Controls

    CVE-2025-43874 (GCVE-0-2025-43874)

    Vulnerability from cvelistv5 – Published: 2026-11-13 21:59 – Updated: 2026-11-13 21:59
    VLAI
    Summary
    : Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows : OS Command Injection. This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
    Severity
    8.7 (High)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    CWE
    • CWE-78 - Improper Neutralization of Special Elements used in an OS Command
    Assigner
    jci CNA under the icscert root
    CNA scorecard C 74/100 over 42 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Johnson Controls iSTAR Ultra Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra SE Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra G2 Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra G2 SE Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Edge G2 Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR  Ultra",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra SE",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra G2",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra G2 SE",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Edge G2",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": ": Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows : OS Command Injection.\u003cp\u003eThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.\u003c/p\u003e"
            }
          ],
          "value": ": Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows : OS Command Injection.\n\nThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-88",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-88: OS Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T21:59:57.409Z",
        "orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
        "shortName": "jci"
      },
      "references": [
        {
          "url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
    "assignerShortName": "jci",
    "cveId": "CVE-2025-43874",
    "datePublished": "2026-11-13T21:59:57.409Z",
    "dateReserved": "2025-04-17T20:07:25.122Z",
    "dateUpdated": "2026-11-13T21:59:57.409Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-53700 (GCVE-0-2025-53700)

    Vulnerability from cvelistv5 – Published: 2026-11-13 21:56 – Updated: 2026-11-13 21:56
    VLAI
    Summary
    CWE‑922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑15 File Manipulation. This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
    Severity
    6.3 (Medium)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
    CWE
    • CWE‑922 Insecure Storage of Sensitive Information
    Assigner
    jci CNA under the icscert root
    CNA scorecard C 74/100 over 42 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Johnson Controls iSTAR Ultra Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra SE Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra G2 Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra G2 SE Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Edge G2 Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra SE",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra G2",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra G2 SE",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Edge G2",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "CWE\u2011922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u201115 File Manipulation.\u003cp\u003eThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.\u003c/p\u003e"
            }
          ],
          "value": "CWE\u2011922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u201115 File Manipulation.\n\nThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC\u201115 File Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE\u2011922 Insecure Storage of Sensitive Information",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T21:56:12.492Z",
        "orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
        "shortName": "jci"
      },
      "references": [
        {
          "url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
    "assignerShortName": "jci",
    "cveId": "CVE-2025-53700",
    "datePublished": "2026-11-13T21:56:12.492Z",
    "dateReserved": "2025-07-08T14:48:42.604Z",
    "dateUpdated": "2026-11-13T21:56:12.492Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-53699 (GCVE-0-2025-53699)

    Vulnerability from cvelistv5 – Published: 2026-11-13 21:50 – Updated: 2026-11-13 21:50
    VLAI
    Summary
    Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑554: Functionality Bypass. This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
    Severity
    7 (High)
    CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    CWE
    • CWE-1299 - Missing protection mechanism for alternate hardware interface
    Assigner
    jci CNA under the icscert root
    CNA scorecard C 74/100 over 42 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Johnson Controls iSTAR Ultra Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra SE Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra G2 Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra G2 SE Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Edge G2 Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra SE",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra G2",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra G2 SE",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Edge G2",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u2011554: Functionality Bypass.\u003cp\u003eThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.\u003c/p\u003e"
            }
          ],
          "value": "Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u2011554: Functionality Bypass.\n\nThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC\u2011554: Functionality Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "PHYSICAL",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1299",
              "description": "CWE-1299 Missing protection mechanism for alternate hardware interface",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T21:50:56.925Z",
        "orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
        "shortName": "jci"
      },
      "references": [
        {
          "url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
    "assignerShortName": "jci",
    "cveId": "CVE-2025-53699",
    "datePublished": "2026-11-13T21:50:56.925Z",
    "dateReserved": "2025-07-08T14:48:42.604Z",
    "dateUpdated": "2026-11-13T21:50:56.925Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-53698 (GCVE-0-2025-53698)

    Vulnerability from cvelistv5 – Published: 2026-11-13 21:46 – Updated: 2026-11-13 21:46
    VLAI
    Summary
    Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra and Johnson Controls iSTAR Ultra SE allows CAPEC‑554: Functionality Bypass. This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02.
    Severity
    7 (High)
    CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    CWE
    • CWE-1299 - Missing protection mechanism for alternate hardware interface
    Assigner
    jci CNA under the icscert root
    CNA scorecard C 74/100 over 42 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Johnson Controls iSTAR Ultra Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra SE Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra SE",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra and Johnson Controls iSTAR Ultra SE allows CAPEC\u2011554: Functionality Bypass.\u003cp\u003eThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02.\u003c/p\u003e"
            }
          ],
          "value": "Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra and Johnson Controls iSTAR Ultra SE allows CAPEC\u2011554: Functionality Bypass.\n\nThis issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC\u2011554: Functionality Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "PHYSICAL",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1299",
              "description": "CWE-1299 Missing protection mechanism for alternate hardware interface",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T21:46:48.829Z",
        "orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
        "shortName": "jci"
      },
      "references": [
        {
          "url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
    "assignerShortName": "jci",
    "cveId": "CVE-2025-53698",
    "datePublished": "2026-11-13T21:46:48.829Z",
    "dateReserved": "2025-07-08T14:48:42.604Z",
    "dateUpdated": "2026-11-13T21:46:48.829Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-53697 (GCVE-0-2025-53697)

    Vulnerability from cvelistv5 – Published: 2026-11-13 21:37 – Updated: 2026-11-13 21:41
    VLAI
    Summary
    Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑560: Use of Default Credentials. This issue affects iSTAR Ultra: before 2.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
    Severity
    8.4 (High)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    CWE
    Assigner
    jci CNA under the icscert root
    CNA scorecard C 74/100 over 42 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Johnson Controls iSTAR Ultra Affected: 0 , < 2.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra SE Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra G2 Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Ultra G2 SE Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Johnson Controls iSTAR Edge G2 Affected: 0 , < 6.9.2.CU02 (custom)
        cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "2.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra SE",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra G2",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Ultra G2 SE",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iSTAR Edge G2",
          "vendor": "Johnson Controls",
          "versions": [
            {
              "lessThan": "6.9.2.CU02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_se:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_ultra_g2_se:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:johnson_controls:istar_edge_g2:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.9.2.cu02",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u2011560: Use of Default Credentials.\u003cp\u003eThis issue affects iSTAR Ultra: before 2.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.\u003c/p\u003e"
            }
          ],
          "value": "Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC\u2011560: Use of Default Credentials.\n\nThis issue affects iSTAR Ultra: before 2.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC\u2011560: Use of Default Credentials"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1392",
              "description": "CWE-1392 Use of default credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-13T21:41:47.141Z",
        "orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
        "shortName": "jci"
      },
      "references": [
        {
          "url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
    "assignerShortName": "jci",
    "cveId": "CVE-2025-53697",
    "datePublished": "2026-11-13T21:37:44.321Z",
    "dateReserved": "2025-07-08T14:48:42.604Z",
    "dateUpdated": "2026-11-13T21:41:47.141Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}