CVE-2026-34494: High severity Johnson Controls Neo Series MVP2 vulnerability
Published Oct 1, 2026
·Updated
- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations.
This issue affects Neo Series MVP2: before 3.3b63.
Affected Software
1 affected component
Johnson Controls Neo Series MVP2<3.3b63
Event History
Oct 1, 2026
CVE Published
via MITRE·09:20 PM
Data Sourced
via MITRE·09:20 PM
DescriptionWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which versions are affected?
Johnson Controls Neo Series MVP2 versions before 3.3b63 are affected.
2
What capability could this issue give an attacker?
The vulnerability allows collection of data from common resource locations through the On-Chip Debug Interface.