iSTAR Edge G2 vulnerabilities

3 known vulnerabilities in iSTAR Edge G2 from Johnson Controls. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  iSTAR Ultra: Missing Protection Mechanism for Alternate Hardware Interface

  CVE-2025-53699Nov 13, 2026Johnson Controls

  Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑5

• 8.4 High severity

  iSTAR Ultra: Use of Default Credentials

  CVE-2025-53697Nov 13, 2026Johnson Controls

  Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑560: Use of Default Credentials. Thi

• 8.7 High severity

  iSTAR Ultra: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-43874Nov 13, 2026Johnson Controls

  : Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows :