CVEvulnerability

CVE-2015-3974

9.0 HIGH Published 2015-09-28 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2015-09-28
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses: CWE-255

Description

EasyIO EasyIO-30P-SF controllers with firmware before 0.5.21 and 2.x before 2.0.5.21, as used in Accutrol, Bar-Tech Automation, Infocon/EasyIO, Honeywell Automation India, Johnson Controls, SyxthSENSE, Transformative Wave Technologies, Tridium Asia Pacific, and Tridium Europe products, have a hardcoded password, which makes it easier for remote attackers to obtain access via unspecified vectors.

Affected configurations

• easyio easyio-30p-sf firmware (<= 0.5.20) • easyio easyio-30p-sf firmware (<= 2.0.5.20) • easyio easyio-30p-sf

Weakness · not in database (1)

CWE-255

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-237-02 Third Party Advisory, US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-237-02 Third Party Advisory, US Government Resource

CVE-2015-3974

Description

Affected configurations

Related

Weakness · not in database (1)

References