Paper/Archive/CVE-2025-53696

CVE-2025-53696

Johnson Controls, Inc iSTAR Ultra — iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware.

EPSS 0.1%CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 EPSS percentile 1.0.010 × 200.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected.

Affected

ProductAffectedFixed inSource

iSTAR Ultra≤ 6.9.2–CNA

Scores by source

Dragos (CNA)9.3CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refraw.githubusercontent.com/reidmefirst/vuln-disclosure/refs/heads/main/2025-03.txt