Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-43873

iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - setFaultDebounce

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jci

Description

Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Control iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2

Default version status: unaffected

  • 0 to ≤ 6.9.3affected

References