Product by Johnson Controls
Istar Ultra
6 known vulnerabilities in Istar Ultra (Johnson Controls), 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-21941 | iSTAR Ultra | 10.0 | |
| High | CVE-2025-43874 | Johnson Controls iSTAR: OS Command Injection | — | |
| High | CVE-2025-53697 | Johnson Controls iSTAR: Use of Default Credentials | — | |
| High | CVE-2025-53699 | Johnson Controls iSTAR: Missing Protection Mechanism for Alternate Hardware Interface | — | |
| High | CVE-2025-53698 | Johnson Controls iSTAR Ultra: Missing Protection Mechanism for Alternate Hardware Interface | — | |
| Medium | CVE-2025-53700 | Johnson Controls iSTAR: security vulnerability | — |