CNNVD-202512-4305 Information

CNNVD ID

CNNVD-202512-4305

CVE-2025-43876

  • CNNVD Published: 2025-12-24

Description (Chinese)

Johnson Controls iSTAR Ultra等都是美国江森自控(Johnson Controls)公司的产品。Johnson Controls iSTAR Ultra是一款门禁控制器。Johnson Controls iSTAR Ultra SE是一款门禁控制器软件。Johnson Controls iSTAR Ultra G2是一款门禁控制器软件。 Johnson Controls多款产品存在安全漏洞,该漏洞源于成功利用可能导致访问设备。以下产品受到影响:iSTAR Ultra、iSTAR Ultra SE、iSTAR Ultra G2、iSTAR Ultra G2 SE和iSTAR Edge G2。

Description (English)

Johnson Controls iSTAR Ultra and others are products of Johnson Controls in the United States. Johnson Controls iSTAR Ultra is a door-ban controller. Johnson Controls iSTAR Ultra SE is a door-ban controller software. Johnson Controls iSTAR Ultra G2 is a door-ban controller software. There is a safety gap in Johnson Controls ’ multiple products, which stems from the successful use of equipment that could lead to access. The following products were affected: iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE and iSTAR Edge G2.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

江森自控

Published

2025-12-24

Last Modified

2026-02-24

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-01 https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Patch

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Share on: