Johnson Controls EasyIO FG

The Johnson Controls EasyIO FG firmware contains hard-coded credentials and improper privilege management flaws, meaning any attacker who discovers these embedded credentials can gain full, unrestricted access to affected devices — no exploitation sophistication required. Because the product line is End-of-Life with no patches forthcoming, every unit still in production remains permanently vulnerable. This situation exemplifies the compounding risk of running unsupported OT/IoT devices in operational environments, where legacy hardware often persists well beyond its intended lifespan. Organizations that fail to track asset lifecycle status expose themselves to known, unmitigable vulnerabilities that attackers can trivially exploit.