EUVD-2026-91074

Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25...

CVE-2026-64893

Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25...

CVE-2026-64893

The Johnson Controls EasyIO Neo series (EC and CW controllers) is vulnerable to a Cleartext Transmission of Sensitive Information vulnerability (CWE-319). This flaw allows an attacker to intercept and read sensitive data, such as credentials and session data , transmitted over the network via a M...

CVE-2026-64893

Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25...

Johnson Controls EasyIO Neo Series EC and CW Controllers

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information that could be used to conduct further attacks against the system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...

CVE-2026-64893: Cleartext Transmission of Sensitive Information

Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25...

PT-2026-104052

Name of the Vulnerable Software and Affected Versions EasyIO NEO versions prior to 3.3b25 Description Cleartext transmission of sensitive information allows for Man In the Middle attacks, where an attacker intercepts data between two parties. In this case, attackers can intercept credentials via...