Threats tagged 'ghsa-6g9j-4q9m-q7fr'

A use of default credentials vulnerability exists in multiple Johnson Controls iSTAR Ultra product lines, including iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, and iSTAR Edge G2. This vulnerability allows unauthorized access due to the use of default credentials. The affected versions are those prior to 2.9.2.CU02 for iSTAR Ultra and prior to 6.9.2.CU02 for the other listed products. The vulnerability is assigned CVE-2025-53697 and has a high severity rating with a CVSS score of 8.4.