What’s Vulnerable › Products

Johnson Controls iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Johnson Controls iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 version is affected

Latest Johnson Controls iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 vulnerabilities

• CVE-2025-43876 — iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - get8021xSettings (CVSS 8.7)
• CVE-2025-43875 — iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - getOptionsInfo (CVSS 8.7)