Insecure Storage of Sensitive Information in Johnson Controls iSTAR Products

CVE-2025-53700

What is CVE-2025-53700?

A vulnerability exists within multiple Johnson Controls iSTAR products, including the iSTAR Ultra series, due to insecure storage of sensitive information. This flaw could allow unauthorized entities to manipulate files and gain access to sensitive data stored within these systems. Affected versions include iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, and iSTAR Edge G2, all prior to version 6.9.2.CU02. It's crucial for users to update their systems to mitigate potential security risks.

References