Johnson Controls EasyIO Neo Series EC and CW Controllers
Low RiskCVSS 3.5ICS-CERT ICSA-26-274-04Oct 1, 2026
Johnson Controls
Attack path
Attack VectorNetwork
Auth RequiredHigh
ComplexityLow
User InteractionRequired
Summary
A vulnerability in Johnson Controls EasyIO Neo Series EC and CW Controllers allows an attacker with high-privilege credentials and network access to extract sensitive information from affected devices. The vulnerability exists in firmware versions EC V3.3b63 and earlier, and CW V3.3b25 and earlier. Successful exploitation could enable an attacker to gather information for conducting further attacks against the system or connected infrastructure.
What this means
What could happen
An attacker with high-privilege access could extract sensitive information from EasyIO Neo controllers, potentially enabling follow-on attacks against building automation systems or connected infrastructure.
Who's at risk
Building automation and facility management operators using Johnson Controls EasyIO Neo Series EC or CW controllers in commercial buildings, data centers, or industrial facilities. Engineering staff with credentials to manage these controllers.
How it could be exploited
An attacker with engineering credentials and network access could connect to debug ports or administrative interfaces on affected EC or CW controllers to read sensitive data stored in device memory or configuration.
Prerequisites
- High-privilege engineering credentials
- Network access to the controller's management interface or debug port
- User interaction to enable debug mode or trigger information access
remotely exploitablerequires high-privilege credentialsinformation disclosuredebug interface exposure
Exploitability
Unlikely to be exploited — EPSS score 0.2%
Affected products (4)
4 pending
ProductAffected VersionsFix Status
EasyIO Neo Series EC Controllers: V3.3b63V3.3b63No fix yet
EasyIO Neo Series EC Controllers: V3.3b62V3.3b62No fix yet
EasyIO Neo Series CW Controllers: V3.3b25V3.3b25No fix yet
EasyIO Neo Series CW Controllers: V3.3b24V3.3b24No fix yet
Remediation & Mitigation
0/6
Do now
0/3HARDENINGRestrict physical access to device debug ports to authorized personnel only
WORKAROUNDMonitor network traffic to and from affected devices for unauthorized access attempts
HARDENINGApply principle of least privilege to all engineering accounts accessing the controllers
Schedule — requires maintenance window
0/2Patching may require device reboot — plan for process interruption
HOTFIXUpgrade EasyIO Neo Series EC Controllers to firmware V3.3b64 or later
HOTFIXUpgrade EasyIO Neo Series CW Controllers to firmware V3.3b26 or later
Long-term hardening
0/1HARDENINGReview and follow Johnson Controls product hardening guide for EasyIO Neo controllers
CVEs (1)
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/740a80cf-ea46-427c-b868-b3b35965cf02Get OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.