ICSA-25-345-02

icsaUScisa_csaf_ot

Johnson Controls iSTAR Ultra

view advisory published 2025-12-11

Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2025-43873US——
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device.
CVE-2025-43874US——
02

references

External citations — patches, advisories, analysis.

03

remediations (24)

  • MitigationiSTAR Edge G2

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • MitigationiSTAR Edge G2

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • MitigationiSTAR Ultra

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • MitigationiSTAR Ultra

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • MitigationiSTAR Ultra G2

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • MitigationiSTAR Ultra G2

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • MitigationiSTAR Ultra G2 SE

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • MitigationiSTAR Ultra G2 SE

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • MitigationiSTAR Ultra LT

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • MitigationiSTAR Ultra LT

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • MitigationiSTAR Ultra SE

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • MitigationiSTAR Ultra SE

    Johnson Controls recommends taking steps to minimize risks to all building automation systems in alignment with CISA's guidance.

  • FixediSTAR Edge G2

    Upgrade iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 to version 6.9.3 or greater.

  • FixediSTAR Edge G2

    Upgrade iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 to version 6.9.3 or greater.

  • FixediSTAR Ultra

    Upgrade iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra LT to version 6.9.7.CU01 or greater.

  • FixediSTAR Ultra

    Upgrade iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra LT to version 6.9.7.CU01 or greater.

  • FixediSTAR Ultra G2

    Upgrade iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 to version 6.9.3 or greater.

  • FixediSTAR Ultra G2

    Upgrade iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 to version 6.9.3 or greater.

  • FixediSTAR Ultra G2 SE

    Upgrade iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 to version 6.9.3 or greater.

  • FixediSTAR Ultra G2 SE

    Upgrade iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 to version 6.9.3 or greater.

  • FixediSTAR Ultra LT

    Upgrade iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra LT to version 6.9.7.CU01 or greater.

  • FixediSTAR Ultra LT

    Upgrade iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra LT to version 6.9.7.CU01 or greater.

  • FixediSTAR Ultra SE

    Upgrade iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra LT to version 6.9.7.CU01 or greater.

  • FixediSTAR Ultra SE

    Upgrade iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra LT to version 6.9.7.CU01 or greater.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan