An authentication bypass flaw in Johnson Controls EasyIO firmware allows an attacker to exploit an alternate path or channel to gain unauthorized access. The vulnerability can result in unauthorized users authenticating to the system, potentially elevating privileges and compromising the confidentiality, integrity, or availability of the managed assets. The weakness is identified by CWE-288, confirming it is an authentication bypass flaw. The CVSS score of 8.7 indicates high severity, showing that the flaw can be critical if exploited.

Johnson Controls EasyIO firmware versions up to and including 3.0b25 are affected. The issue does not appear in later firmware revisions beyond 3.0b25.

The CVSS score signals a serious risk, and although EPSS is not available, the lack of KEV listing means no active exploits are publicly known yet. However, the vulnerability can be leveraged if the alternate authentication path is reachable from an attacker’s network or device. It is inferred that the attack vector requires an active network connection to the firmware’s authentication channel, and the absence of a publicly documented exploit does not preclude future exploitation. Organizations should treat this as a high threat pending detection of exploitation attempts.