{"id":"CVE-2025-53696","state":"PUBLISHED","title":"iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. T","description":"iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected.","publishedAt":"2025-07-28T14:43:01.059Z","updatedAt":"2025-08-19T14:43:13.549Z","severity":{"score":9.3,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","source":"Dragos"},"assigner":"Dragos","products":["Johnson Controls, Inc iSTAR Ultra"],"affected":[{"vendor":"Johnson Controls, Inc","product":"iSTAR Ultra","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"6.9.2","versionType":"custom"}],"platforms":["Linux"]}],"references":["https://raw.githubusercontent.com/reidmefirst/vuln-disclosure/refs/heads/main/2025-03.txt"],"weaknesses":["CWE-494"],"ingestedAt":"2026-10-29T20:09:31.862Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/53xxx/CVE-2025-53696.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-53696","state":"PUBLISHED","datePublished":"2025-07-28T14:43:01.059Z","dateUpdated":"2025-08-19T14:43:13.549Z","assignerShortName":"Dragos","assignerOrgId":"12bdf821-1545-4a87-aac5-61670cc6fcef","dateReserved":"2025-07-08T14:48:42.604Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected."}],"affected":[{"vendor":"Johnson Controls, Inc","product":"iSTAR Ultra","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"6.9.2","versionType":"custom"}],"platforms":["Linux"]}],"references":[{"url":"https://raw.githubusercontent.com/reidmefirst/vuln-disclosure/refs/heads/main/2025-03.txt"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":9.3,"baseSeverity":"CRITICAL","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"HIGH","subConfidentialityImpact":"HIGH","subIntegrityImpact":"HIGH","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-494","description":"CWE-494 Download of Code Without Integrity Check","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Dragos","orgId":"12bdf821-1545-4a87-aac5-61670cc6fcef","dateUpdated":"2025-08-19T14:43:13.549Z"},"impacts":[{"capecId":"CAPEC-638","descriptions":[{"lang":"en","value":"CAPEC-638 Altered Component Firmware"}]},{"capecId":"CAPEC-452","descriptions":[{"lang":"en","value":"CAPEC-452 Infected Hardware"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-28T15:25:02.419648Z","id":"CVE-2025-53696","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-07-28T17:57:40.745Z"}}]}}}