Johnson Controls iSTAR Ultra, iSTAR Ultra SE vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Johnson Controls iSTAR Ultra, iSTAR Ultra SE: 2 record(s), with affected versions and fixes.
CVE-2025-43876
High · 8.7
CWE-78 Dec 24, 2025
iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - get8021xSettings
Under certain circumstances a successful exploitation could result in access to the device.
CVE-2025-43875
High · 8.7
CWE-78 Dec 24, 2025
iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - getOptionsInfo
Under certain circumstances a successful exploitation could result in access to the device.