Skip to content
OpenAdvisories
High · 7.0 CVE-2025-53699 EUVD-2025-211329GHSA-h9g8-78r9-wf5c

Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra S…

Published Nov 13, 2026 · Assigned by jci

Description

Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑554: Functionality Bypass.

This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.

Affected products

VendorProductAffectedFixed
Johnson Controls iSTAR Ultra < 6.9.2.CU02 6.9.2.CU02
Johnson Controls iSTAR Ultra SE < 6.9.2.CU02 6.9.2.CU02
Johnson Controls iSTAR Ultra G2 < 6.9.2.CU02 6.9.2.CU02
Johnson Controls iSTAR Ultra G2 SE < 6.9.2.CU02 6.9.2.CU02
Johnson Controls iSTAR Edge G2 < 6.9.2.CU02 6.9.2.CU02

References