Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-43875

iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - getOptionsInfo

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jci

Description

Under certain circumstances a successful exploitation could result in access to the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Johnson Controls iSTAR Ultra, iSTAR Ultra SE

Default version status: unaffected

  • 0 to ≤ 6.9.7affected

Johnson Controls iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2

Default version status: unaffected

  • 0 to ≤ 6.9.2affected

References