Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)
Successful exploitation of these vulnerabilities may allow an attacker to modify firmware and access the space that is protected by the device.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-53696US | —OT elevated | — | ||
iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. T… | ||||
| CVE-2025-53695US | — | — | ||
OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access ('root' user) to the device firmware. | ||||
| CVE-2025-53697US | —OT elevated | — | ||
| CVE-2025-53698US | —OT elevated | — | ||
| CVE-2025-53699US | —OT elevated | — | ||
| CVE-2025-53700US | — | — | ||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-25-224-02 JSONself
- ICSA Advisory ICSA-25-224-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (30)
- MitigationiSTAR Edge G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Edge G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Edge G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Edge G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2 SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2 SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2 SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2 SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- FixediSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
- FixediSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
- FixediSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
- FixediSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
- FixediSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
- FixediSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan