On-Chip Debug Interface Vulnerability in Johnson Controls EasyIO FS32
CVE-2026-34493

7.2HIGH

Key Information:

Vendor

Johnson Controls

Status
Easyio Fs32
Vendor
CVE Published:
1 October 2026

What is CVE-2026-34493?

The On-Chip Debug Interface vulnerability in the Johnson Controls EasyIO FS32 device allows unauthorized access to sensitive data from common resource locations. This flaw can potentially be exploited if the affected versions are not adequately secured, highlighting the need for prompt updates and security measures to mitigate the associated risks.

Affected Version(s)

EasyIO FS32 0 < 3.3b63

References

https://www.johnsoncontrols.com/trust-center/cybersecurit...

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.