Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Johnson Controls iSTAR OS Command Injection Vulnerabilities (CVE-2025-43875/43876)

www.cisa.gov 2025-12-29 查看中文 →
Security Advisory CVE-2025-43875 High Johnson Controls
Affected:
  • Johnson Controls iSTAR Ultra < 6.9.7.CU01
  • Johnson Controls iSTAR Ultra SE < 6.9.7.CU01
  • Johnson Controls iSTAR Ultra G2 < 6.9.3
  • Johnson Controls iSTAR Ultra G2 SE < 6.9.3
  • Johnson Controls iSTAR Edge G2 < 6.9.3
Fixed in:
  • 6.9.7.CU01
  • 6.9.3
Referenced CVEs: CVE-2025-43876 CVE-2025-43875
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from www.cisa.gov, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
MikroTik RouterOS Integer Underflow Vulnerability Advisory (CVE-2026-84411) 2026-10-03 CISA ICSA-26-274-01: Armatura One Vulnerabilities (RCE via Deserialization, Hardcoded Credentials) 2026-10-03 CISA Alert: Monta monta.app ICS Critical Authentication Vulnerabilities (CVE-2026-95102) 2026-10-03 CISA ICSA-26-254-01: Multiple High-Severity Vulnerabilities in CISA Malcolm v3.8.8 2026-10-03 Meari IoT Cloud Platform OpenAPI Service Authentication Bypass Vulnerability (ICSA-26-274-06) 2026-10-03
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro