Will Johnson Controls EasyIO Neo EC/CW CVE be actively exploited by Oct 31?

CISA Alert reports Johnson Controls EasyIO Neo Series EC and CW Controllers vulnerabilities enabling credential and session data interception. Building automation systems are critical infrastructure targets with high exploitation likelihood given their prevalence and access to physical systems.

Resolution Criteria

Public disclosure of active exploitation (PoC, breach report, threat intelligence, CISA directive) by Oct 31, 2026.