Johnson Controls iSTAR OS Command Injection Vulnerabilities (CVE-2025-43875/43876)

www.cisa.gov 2025-12-29查看中文 →

Security AdvisoryCVE-2025-43875HighJohnson Controls

Affected:

Johnson Controls iSTAR Ultra < 6.9.7.CU01
Johnson Controls iSTAR Ultra SE < 6.9.7.CU01
Johnson Controls iSTAR Ultra G2 < 6.9.3
Johnson Controls iSTAR Ultra G2 SE < 6.9.3
Johnson Controls iSTAR Edge G2 < 6.9.3

Fixed in:

6.9.7.CU01
6.9.3

Referenced CVEs: CVE-2025-43876 CVE-2025-43875

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.cisa.gov, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

MAXHUB Pivot Client Broken Cryptographic Algorithm Vulnerability (CVE-2026-6411) 2026-05-08 Medtronic MiniMed 600 Series Insulin Pumps CVE-2022-32537 Vulnerability Analysis 2026-05-08 Medtronic MyCareLink 24950 Patient Monitor CVE-2018-10626/10622 Vulnerability Summary 2026-05-08

Offline Archive

Offline screenshot & PDF are Pro-exclusive