Skip to content
OpenAdvisories
High · 7.1 CVE-2025-61736 EUVD-2025-203896GHSA-56m3-38wm-p83g

iSTAR- Improper Validation of Certificate Expiration

Published Dec 17, 2025 · Updated Dec 17, 2025 · Assigned by jci

Vendor: Johnson Controls Product: iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra , iSTAR Ultra SE Category: Browsers

Description

Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.

Affected products

VendorProductAffectedFixed
Johnson Controls iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra , iSTAR Ultra SE iSTAR All versions prior to TLS 1.2 —

Advisories 1

References