PT-2026-104024 · Johnson Controls · Easyio Fs32

CVE-2026-71451

Published

2026-10-01

Updated

2026-10-02

CVSS v4.0

7.2

High

Vector

AV:A/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Johnson Controls EasyIO FS32 versions prior to 3.0b63

Description An OS Command Injection flaw exists in the system, which allows an attacker to execute arbitrary operating system commands.

Recommendations Update Johnson Controls EasyIO FS32 to version 3.0b63 or later.

Fix

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-71451

Easyio Fs32