Under certain circumstances a successful exploitation could result in access to the device.
PUBLISHED5.2CWE-78
iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - getOptionsInfo
Problem type
Affected products
Johnson Controls
iSTAR Ultra, iSTAR Ultra SE
<= 6.9.7 - AFFECTED
iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2
<= 6.9.2 - AFFECTED
References
johnsoncontrols.com
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories
cisa.gov
https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-01
GitHub Security Advisories
GHSA-frq8-587v-8qcr
Under certain circumstances a successful exploitation could result in access to the device.
https://github.com/advisories/GHSA-frq8-587v-8qcrUnder certain circumstances a successful exploitation could result in access to the device.
JSON source
https://cveawg.mitre.org/api/cve/CVE-2025-43875Click to expand
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2025-43875",
"assignerOrgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
"assignerShortName": "jci",
"dateUpdated": "2025-12-24T16:21:31.227Z",
"dateReserved": "2025-04-17T20:07:25.122Z",
"datePublished": "2025-12-24T15:19:19.145Z",
"state": "PUBLISHED"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "7281d04a-a537-43df-bfb4-fa4110af9d01",
"shortName": "jci",
"dateUpdated": "2025-12-24T15:24:12.546Z"
},
"datePublic": "2025-12-11T17:00:00.000Z",
"title": "iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - getOptionsInfo",
"descriptions": [
{
"lang": "en",
"value": "Under certain circumstances a successful exploitation could result in access to the device.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<span style=\"background-color: rgb(255, 255, 255);\">Under certain circumstances a successful exploitation </span><span style=\"background-color: rgb(255, 255, 255);\">could result in access to the device.</span>"
}
]
}
],
"affected": [
{
"vendor": "Johnson Controls",
"product": "iSTAR Ultra, iSTAR Ultra SE",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "6.9.7"
}
]
},
{
"vendor": "Johnson Controls",
"product": "iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2",
"defaultStatus": "unaffected",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "custom",
"lessThanOrEqual": "6.9.2"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
"cweId": "CWE-78",
"type": "CWE"
}
]
}
],
"references": [
{
"url": "https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-01"
}
],
"impacts": [
{
"capecId": "CAPEC-88",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-88: OS Command Injection"
}
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"solutions": [
{
"lang": "en",
"value": "* Upgrade iSTAR Ultra, iSTAR Ultra SE to version 6.9.7.CU01 or greater.\n * Upgrade iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 to version 6.9.3 or greater",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<ul><li><span style=\"background-color: rgba(5, 21, 36, 0.06);\"><span style=\"background-color: rgb(255, 255, 255);\">Upgrade iSTAR Ultra, iSTAR Ultra SE to version 6.9.7.CU01 or greater.</span></span></li><li>Upgrade iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2 to version 6.9.3 or greater</li></ul>"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Johnson Controls reported these vulnerabilities to CISA.",
"type": "finder"
}
]
},
"adp": [
{
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2025-12-24T16:21:31.227Z"
},
"title": "CISA ADP Vulnrichment",
"metrics": [
{}
]
}
]
}
}