Threats tagged 'ghsa-vmj8-7r4m-rf88'

A vulnerability in Johnson Controls iSTAR Ultra and iSTAR Ultra SE devices prior to version 6.9.2.CU02 allows functionality bypass due to a missing protection mechanism for an alternate hardware interface. This security flaw is identified as CVE-2025-53698 and is classified with a high severity score of 7. The issue affects versions before 6.9.2.CU02 and relates to CWE-1299. No public exploits or patches are currently documented.