CVE-2025-43875 | Johnson Controls iSTAR Edge G2 os command injection

A vulnerability, which was classified as critical, was found in Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE and iSTAR Edge G2. Affected is an unknown function. Executing manipulation can lead to os command injection.

This vulnerability is handled as CVE-2025-43875. The attack can be executed remotely. There is not any exploit available.