Skip to content
OpenAdvisories
High · 8.4 CVE-2025-53697 EUVD-2025-211326GHSA-6g9j-4q9m-q7fr

Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2,…

Published Nov 13, 2026 · Updated Nov 13, 2026 · Assigned by jci

Description

Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑560: Use of Default Credentials.

This issue affects iSTAR Ultra: before 2.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.

Affected products

VendorProductAffectedFixed
Johnson Controls iSTAR Ultra 0 <2.9.2.CU02 —
Johnson Controls iSTAR Ultra G2 SE 0 <6.9.2.CU02 —
Sensormatic Electronics, a subsidiary of Johnson Controls iSTAR Ultra G2 0 <6.9.2.CU02 —
Sensormatic Electronics, a subsidiary of Johnson Controls iSTAR Edge G2 0 <6.9.2.CU02 —
Johnson Controls iSTAR Ultra SE 0 <6.9.2.CU02 —

References