CVE-2025-53698
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra and Johnson Controls iSTAR Ultra SE allows CAPEC‑554: Functionality Bypass. This issue affects iSTAR Ultra: before 6.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02.
| CWE | CWE-1299 |
| Vendor | johnson controls |
| Product | istar ultra |
| Published | Nov 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for johnson controls istar ultra
Be the first to know when new unknown vulnerabilities affecting johnson controls istar ultra are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Johnson Controls / iSTAR Ultra
0 < 6.9.2.CU02
Johnson Controls / iSTAR Ultra SE
0 < 6.9.2.CU02