Johnson Controls, Inc Istar Ultra

2 CVEs affecting Johnson Controls, Inc Istar Ultra. Latest disclosed: 2025-07-28. Critical: 0, High: 0.

Top CVEs affecting Johnson Controls, Inc Istar Ultra
CVESeverityScorePublishedSummary
CVE-2025-536962025-07-28iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may cont…
CVE-2025-536952025-07-28OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access ('root' user) to the device f…