CVE-2025-43874 | Johnson Controls iSTAR Edge G2 2.9.2.CU02 os command injection

A vulnerability marked as very critical has been reported in Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE and iSTAR Edge G2 2.9.2.CU02. This affects an unknown function. The manipulation leads to os command injection.

This vulnerability is uniquely identified as CVE-2025-43874. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More