54 matches found
CVE-2025-53696
iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected...
CVE-2025-53696
iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected...
CVE-2025-53696
iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected...
CVE-2025-53696
CVE-2025-53696 affects Johnson Controls iSTAR Ultra family (including Ultra SE, Ultra G2, Ultra G2 SE, Edge G2) with firmware versions 6.9.2 and older. The root cause is incomplete boot-time firmware verification, where the boot verification does not inspect certain portions of the firmware, allo...
CVE-2025-53695
OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access 'root' user to the device firmware...
CVE-2025-53695
OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access 'root' user to the device firmware...
CVE-2025-53695
OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access 'root' user to the device firmware...
CVE-2025-53695
CVE-2025-53695 affects Johnson Controls’ iSTAR Ultra family (Ultra, Ultra SE, Ultra G2, Ultra G2 SE, Edge G2). The vulnerability is an OS command injection in the web application that, when exploited by an authenticated attacker, can grant root-level access to the device firmware. Public sources ...
Johnson Controls iSTAR Ultra 安全漏洞
Johnson Controls iSTAR Ultra is an access controller from Johnson Controls, Inc. It provides network resiliency and faster processing speeds. A security vulnerability exists in the Johnson Controls iSTAR Ultra that stems from the presence of OS command injection in the web application, which coul...
PT-2025-31110 · Unknown · Istar Ultra
Name of the Vulnerable Software and Affected Versions: iSTAR Ultra versions up to 6.9.2 Description: iSTAR Ultra performs a firmware verification on boot, however, the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Recommendations:...
Johnson Controls iSTAR Ultra 安全漏洞
Johnson Controls iSTAR Ultra is an access controller from Johnson Controls, Inc. It provides network resiliency and faster processing speeds. A security vulnerability exists in Johnson Controls iSTAR Ultra versions 6.9.2 and earlier, which stems from incomplete firmware validation and could lead ...
PT-2025-31108 · Unknown · Istar Ultra
Name of the Vulnerable Software and Affected Versions: iSTAR Ultra products affected versions not specified Description: An OS Command Injection issue exists in the iSTAR Ultra products web application. An authenticated attacker can exploit this to gain privileged access, specifically 'root' user...
CVE-2023-3127
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...
CVE-2023-3127
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...
CVE-2023-3127
CVE-2023-3127 concerns improper authentication in Sensormatic Electronics iSTAR devices (Ultra, Ultra LT, Ultra G2, Edge G2). The vulnerability allows an unauthenticated user to login with administrator rights, with CVSS v3.1 base score 7.5 (AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L) per CISA ICS and N...
CVE-2023-3127 Improper Authentication in iSTAR
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...
CVE-2023-3127 Improper Authentication in iSTAR
An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights...
PT-2023-23269 · Unknown · Istar Ultra G2 +3
Name of the Vulnerable Software and Affected Versions: iSTAR Ultra affected versions not specified iSTAR Ultra LT affected versions not specified iSTAR Ultra G2 affected versions not specified iSTAR Edge G2 affected versions not specified Description: An unauthenticated user could log into the...
Johnson Controls iSTAR Ultra 授权问题漏洞
Johnson Controls iSTAR Ultra is a door controller from Johnson Controls, Inc. It provides network resiliency and faster processing speeds. A security vulnerability exists in the Johnson Controls iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2, which originates from an unauthenticat...