Our takeCISA reports two vulnerabilities in Johnson Controls EasyIO FG firmware <=2.0b52 that let attackers gain full device access. Update to a fixed version if you run these OT controllers.Cyber Resilience desk
Sources (2)
- cisa_ics · cisa_ics
- cisa_advisories · cisa_advisories
What this means for you — Security leader:CISA reports two vulnerabilities in Johnson Controls EasyIO FG firmware <=2.0b52 that let attackers gain full device access. Update to a fixed version immediately if you operate these OT devices.
What this means for you — Lean IT orgs:If you use Johnson Controls EasyIO FG controllers, check the firmware version and update past 2.0b52 right away. This is the kind of OT gear that often sits unpatched in smaller setups.
What this means for you — MSP:Check client environments for any Johnson Controls EasyIO FG controllers running firmware <=2.0b52 and schedule updates. These OT vulnerabilities allow full device compromise.
What this means for you — Researcher:CISA published ICSA-26-279-01 detailing two vulnerabilities (CVE-2026-27872, CVE-2026-27873) in Johnson Controls EasyIO FG <=2.0b52 that enable full unauthorized device access. CVSS 7.7.