CVE-2025-53696CWE-494

iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware

Critical · published July 28, 2025

CVSS v4.0
9.3
EPSS
0%
Percentile
0.9
In the wild
Unconfirmed
What it is

iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware. These firmware parts may contain malicious code. Tested up to firmware 6.9.2, later firmwares are also possibly affected.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00101 · 0.9th percentile
Weakness
CWE-494 · Download of Code Without Integrity Check
Published
2025-07-28T14:43Z
EPSS history
Timeline
  • 28 JUL 14:43Z
    iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the firmware
    cvelistv5