CVE-2026-27872 EasyIO FG

MediumCVSS 5.6 EPSS 0.09%

Published: 2026-10-01 21:57
Updated: 2026-10-02 20:49
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force).

This issue affects Easy IO FG: before 2.0b52.

Affected products

Product	Affected versions	Fixed in
Johnson Controls Easy IO FG	< 2.0b52	2.0b52

References

www.johnsoncontrols.com

CVSS v4.0

5.6 Medium

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:P

Attack Vector: Local
Attack Complexity: High
Attack Requirements: Present
Privileges Required: Low
User Interaction: None
Vulnerable System Confidentiality: Low
Vulnerable System Integrity: High
Vulnerable System Availability: High
Subsequent System Confidentiality: Low
Subsequent System Integrity: High
Subsequent System Availability: High
Exploit Maturity: POC

All scores (2)

v4.0 5.6 · jci
v4.0 5.6 · productsecurity@jci.com

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.09% (percentile 0.3)
CWE: CWE-269 Improper Privilege Management

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.