CVE-2026-71451

Received Received - Intake

OS Command Injection in Johnson Controls EasyIO FS32

Publication date: 2026-10-01

Last updated on: 2026-10-01

Assigner: Johnson Controls

Description

- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects EasyIO FS32: before 3.0b63.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-01

Last Modified

2026-10-01

Generated

2026-10-02

AI Q&A

2026-10-02

EPSS Evaluated

N/A

NVD

CVE-2026-71451

Affected Vendors & Products

Vendor	Product	Version / Range
johnson_controls	easyio_fs32	to 3.0b63 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This vulnerability is an OS Command Injection flaw in Johnson Controls EasyIO FS32 devices running versions before 3.0b63. It allows attackers to inject and execute arbitrary commands on the affected system through manipulated inputs.

Impact Analysis

An attacker could exploit this to gain unauthorized access to the device, execute malicious commands, potentially leading to system compromise, data theft, or disruption of operations.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating confidentiality requirements in GDPR and HIPAA. Organizations may face compliance violations, fines, or legal consequences if exploited.

Mitigation Strategies

Update EasyIO FS32 to version 3.0b63 or later to address the OS Command Injection vulnerability. If updating is not immediately possible, restrict network access to the device and monitor for unusual command execution attempts.

Hi! I’m here to help you understand CVE-2026-71451. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70