CVE-2025-43875: iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - getOptionsInfo
Under certain circumstances a successful exploitation could result in access to the device.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.9.3 - Upgrade
Upgrade
iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2to a version that resolves this vulnerability.Fixed in 6.9.3 - Upgrade
Upgrade
iSTAR Ultra, iSTAR Ultra SEto a version that resolves this vulnerability.Fixed in 6.9.7.CU01
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43875?
CVE-2025-43875 is considered a high severity vulnerability due to its potential to allow authenticated attackers to gain privileged access to the device.
How do I fix CVE-2025-43875?
To fix CVE-2025-43875, update affected products to at least version 6.9.7.CU01 or 6.9.3 as applicable.
Which products are affected by CVE-2025-43875?
CVE-2025-43875 affects Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, and iSTAR Edge G2 versions prior to 6.9.7.CU01 or 6.9.3.
What type of access does CVE-2025-43875 provide?
CVE-2025-43875 can allow authenticated attackers to gain root access to the affected device.
Is CVE-2025-43875 exploitable in all environments?
No, CVE-2025-43875 is exploitable under certain circumstances that depend on the configuration and authentication of the web application.