PT-2026-147181

CVE-2025-53697

·

Published

2026-11-13

·

Updated

2026-11-13

Description by

CVSS 4.0
8.4
High
MetricsAV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson Controls iSTAR Ultra G2, Johnson Controls iSTAR Ultra G2 SE, and Johnson Controls iSTAR Edge G2 allows CAPEC‑560: Use of Default Credentials.
This issue affects iSTAR Ultra: before 2.9.2.CU02; iSTAR Ultra SE: before 6.9.2.CU02; iSTAR Ultra G2: before 6.9.2.CU02; iSTAR Ultra G2 SE: before 6.9.2.CU02; iSTAR Edge G2: before 6.9.2.CU02.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
CWE-1392: Use of Default Credentials
Related identifiers
CVE-2025-53697
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com