Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 (Update A)
Successful exploitation of these vulnerabilities may allow an attacker to modify firmware and access the space that is protected by the device.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-53696US | —OT erhöht | — | ||
iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. T… | ||||
| CVE-2025-53695US | — | — | ||
OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access ('root' user) to the device firmware. | ||||
| CVE-2025-53697US | —OT erhöht | — | ||
| CVE-2025-53698US | —OT erhöht | — | ||
| CVE-2025-53699US | —OT erhöht | — | ||
| CVE-2025-53700US | — | — | ||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-224-02 JSONself
- ICSA Advisory ICSA-25-224-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (30)
- MitigationiSTAR Edge G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Edge G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Edge G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Edge G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2 SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2 SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2 SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra G2 SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- MitigationiSTAR Ultra SE
Dragos recommends end users place the following network restrictions around iSTAR controllers, regardless of model or firmware version:
- BehobeniSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
- BehobeniSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
- BehobeniSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
- BehobeniSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
- BehobeniSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
- BehobeniSTAR Ultra
According to Johnson Controls, the iSTAR Ultra is an older device that has a planned end of service date within a year from this publication. Johnson Controls recommends users consider upgrading to a newer control unit. The hardware installation manual for iSTAR Ultra requires all control units be installed in a restricted access, protected area to lower the risk of physical tampering.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan