PT-2026-104025 · Johnson Controls · Easyio Fs32

Gabriele Gardois

·

CVE-2026-71452

·

Published

2026-10-01

·

Updated

2026-10-02

CVSS v4.0

8.4

High

VectorAV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.0b63
Description An OS Command Injection flaw exists in Johnson Controls EasyIO FS32, which allows an attacker to execute arbitrary operating system commands on the affected device.
Recommendations Update EasyIO FS32 to version 3.0b63 or later.

Fix

OS Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-71452

Affected Products

Easyio Fs32