CVE-2026-34493
HighCVSS 7.2Summary
An On-Chip Debug Interface vulnerability exists in Johnson Controls EasyIO FS32 that allows collecting data from common resource locations. This issue affects EasyIO FS32 versions before 3.3b63.
Risk Assessment
Someone with physical access to the device could read data from memory and system resources, potentially resulting in leakage of sensitive information.
Recommendation
Upgrade EasyIO FS32 to version 3.3b63 or later. Restrict physical access to devices and secure debug ports.
Other vulnerabilities in EasyIO FS32
See all- CVE-2026-71452High
An OS Command Injection vulnerability exists in Johnson Controls EasyIO FS32. This issue affects EasyIO FS32 versions before 3.0b63.
- CVE-2026-71449Critical
A use of hard-coded cryptographic key vulnerability in Johnson Controls EasyIO FS32 allows retrieval of embedded sensitive data. This issue affects EasyIO FS32 versions before 3.0b63.
Original NVD description (English source)
- On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS