ICSA-25-338-04

icsaUScisa_csaf_ot

Johnson Controls iSTAR

view advisory published 2025-12-04

Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-61736US——
Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.
02

references

External citations — patches, advisories, analysis.

03

remediations (7)

  • MitigationiSTAR Edge

    Convert encryption mode to TLS 1.3, per cluster:

  • MitigationiSTAR Ultra (if in TLS 1.2)

    Convert encryption mode to TLS 1.3, per cluster:

  • MitigationiSTAR Ultra LT (if in TLS 1.2)

    Convert encryption mode to TLS 1.3, per cluster:

  • MitigationiSTAR Ultra SE (if in TLS 1.2)

    Convert encryption mode to TLS 1.3, per cluster:

  • MitigationiSTAR eX

    Convert encryption mode to TLS 1.3, per cluster:

  • FixediSTAR Edge

    Applies primarily to iSTAR eX, iSTAR Edge, and iSTAR LT panels

  • FixediSTAR eX

    Applies primarily to iSTAR eX, iSTAR Edge, and iSTAR LT panels

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan