CVE-2025-61736

HIGH

iSTAR- Improper Validation of Certificate Expiration

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-61736 has a selected CVSS score of 7.1 (high).

Description

Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 17, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra , iSTAR Ultra SE

Browse Johnson Controls / iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra , iSTAR Ultra SE

Default status: affected

CVE ListiSTAR All versions prior to TLS 1.2affected

References

3