ICSA-26-279-01

icsaUScisa_csaf_ot

Johnson Controls EasyIO FG

view advisory published 2026-10-06

Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-27873US—OT elevated—
- Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52.
CVE-2026-27872US—OT elevated—
- Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force). This issue affects Easy IO FG: before 2.0b52.
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • MitigationEasyIO FG firmware

    Allow connections only from whitelisted IP addresses

  • MitigationEasyIO FG firmware

    Allow connections only from whitelisted IP addresses

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan