CVE-2026-71451

OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects EasyIO FS32: before 3.0b63...

EUVD-2026-91062

OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-27874

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-27874

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

EUVD-2026-91061

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-27874

The Johnson Controls EasyIO FS32 software is affected by a Use of Hard-coded Credentials vulnerability (CWE-798) in versions prior to 3.0b63 . An attacker can exploit these hard-coded or default credentials to gain unauthorized access to the system. To remediate this issue, users should update Ea...

Johnson Controls EasyIO Neo Series EC and CW Controllers

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker tointercept and read sensitive information, including credentials andsession data. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

Johnson Controls EasyIO Neo Series EC and CW Controllers

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information that could be used to conduct further attacks against the system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

PT-2026-104026

Name of the Vulnerable Software and Affected Versions Johnson Controls EasyIO FS32 versions prior to 3.0b63 Description An External Control of File Name or Path issue allows a path traversal attack. This occurs when the software does not properly validate user-supplied input used to construct a...

CVE-2026-71452: Improper Neutralization of Special Elements used in an OS Command

OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects EasyIO FS32: before 3.0b63...

PT-2026-104020

Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.0b63 Description Johnson Controls EasyIO FS32 contains hard-coded credentials, which allows an attacker to exploit these default credentials to gain unauthorized access to the system. Recommendations Update Easy...

PT-2026-104021

Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.3b63 Description An On-Chip Debug Interface issue in Johnson Controls EasyIO FS32 allows the collection of data from common resource locations, leading to information disclosure. Recommendations Update EasyIO FS...

PT-2026-104052

Name of the Vulnerable Software and Affected Versions EasyIO NEO versions prior to 3.3b25 Description Cleartext transmission of sensitive information allows for Man In the Middle attacks, where an attacker intercepts data between two parties. In this case, attackers can intercept credentials via...

CVE-2026-71453: External Control of File Name or Path

External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack. This issue affects EasyIO FS32: before 3.0b63...

PT-2026-104025

Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.0b63 Description An OS Command Injection flaw exists in Johnson Controls EasyIO FS32, which allows an attacker to execute arbitrary operating system commands on the affected device. Recommendations Update EasyIO...

PT-2026-104030

Name of the Vulnerable Software and Affected Versions EasyIO FG versions prior to 2.0b52 Description Johnson Controls EasyIO FG contains hard-coded credentials, which can be leveraged to perform password spraying. Password spraying is a type of brute-force attack where a common password is tried...

CVE-2026-71449: Use of Hard-coded Cryptographic Key

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63...

CVE-2026-64893: Cleartext Transmission of Sensitive Information

Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25...

CVE-2026-27873: Use of Hard-coded Credentials

Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52...

CVE-2026-34493: On-Chip Debug and Test Interface With Improper Access Control

On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...