CVE-2026-71449
CriticalCVSS 9.3Summary
A use of hard-coded cryptographic key vulnerability in Johnson Controls EasyIO FS32 allows retrieval of embedded sensitive data. This issue affects EasyIO FS32 versions before 3.0b63.
Risk Assessment
An attacker can gain access to sensitive data stored in the device, potentially leading to information security breach. This could enable further attacks on building infrastructure.
Recommendation
Update EasyIO FS32 to version 3.0b63 or later. Key rotation and access auditing are also recommended.
Other vulnerabilities in EasyIO FS32
See all- CVE-2026-71452High
An OS Command Injection vulnerability exists in Johnson Controls EasyIO FS32. This issue affects EasyIO FS32 versions before 3.0b63.
- CVE-2026-34493High
An On-Chip Debug Interface vulnerability exists in Johnson Controls EasyIO FS32 that allows collecting data from common resource locations. This issue affects EasyIO FS32 versions before 3.3b63.
Original NVD description (English source)
: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS