Vulnerability in Johnson Controls, Inc Istar Ultra
CVE-2025-53696
iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected.
EPSS: 0.001 (0.8th percentile) — read the EPSS interpretation.
Affected products
- Johnson Controls, Inc Istar Ultra — versions 0