A vulnerability classified as problematic has been found in Johnson Controls iSTAR eX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra and iSTAR Ultra SE. The impacted element is an unknown function. Performing manipulation results in improper validation of certificate expiration.

This vulnerability was named CVE-2025-61736. The attack may be initiated remotely. There is no available exploit.