Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.1%	CVE-2025-53696iSTAR Ultra · Download of Code Without Integrity Check Critical9.3EPSS 0.1%2025-07-28CVE Database V5CVE-2025-53696 iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected. EPSS 0.1%Vulnerability Johnson Controls, Inc #cwe-494	CVE Database V5	2025-07-28
Critical	9.4	EPSS 0.9%	CVE-2025-53695iSTAR Ultra · OS Command Injection Critical9.4EPSS 0.9%2025-07-28CVE Database V5CVE-2025-53695 OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileged access ('root' user) to the device firmware. EPSS 0.9%Vulnerability Johnson Controls, Inc #cwe-78	CVE Database V5	2025-07-28

Showing 1–2 of 2 results