CVE-2025-43875

Under certain circumstances a successful exploitation could result in access to the device.

Score

CVSS 4.0 8.7 High

Status

Deferred - productsecurity@jci.com

Published

2025-12-24

Last modified

2026-10-07

Weaknesses

CWE-78

Affected products

• Istar Edge G2 (Johnson Controls)
• Istar Ultra (Johnson Controls)
• Istar Ultra G2 (Johnson Controls)
• Istar Ultra G2 Se (Johnson Controls)
• Istar Ultra Se (Johnson Controls)

References

• https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-01