CVE-2025-43876 | Johnson Controls iSTAR Edge G2 os command injection

A vulnerability classified as critical has been found in Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE and iSTAR Edge G2. The impacted element is an unknown function. This manipulation causes os command injection.

This vulnerability appears as CVE-2025-43876. The attack may be initiated remotely. There is no available exploit.

If you want to get best quality of vulnerability data, you may have to visit VulDB.