Johnson Controls EasyIO FG
Advisory ansehen veröffentlicht 2026-10-06
Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-27873US | —OT erhöht | — | ||
- Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying.
This issue affects EasyIO FG: before 2.0b52. | ||||
| CVE-2026-27872US | —OT erhöht | — | ||
- Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force).
This issue affects Easy IO FG: before 2.0b52. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-26-279-01 JSONself
- ICSA Advisory ICSA-26-279-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationEasyIO FG firmware
Allow connections only from whitelisted IP addresses
- MitigationEasyIO FG firmware
Allow connections only from whitelisted IP addresses
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan