CVE-2015-3974 | BDVDB-2026-71863 Detail

Description#

EasyIO EasyIO-30P-SF controllers with firmware before 0.5.21 and 2.x before 2.0.5.21, as used in Accutrol, Bar-Tech Automation, Infocon/EasyIO, Honeywell Automation India, Johnson Controls, SyxthSENSE, Transformative Wave Technologies, Tridium Asia Pacific, and Tridium Europe products, have a hardcoded password, which makes it easier for remote attackers to obtain access via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://ics-cert.us-cert.gov/advisories/ICSA-15-237-02

Exploit#

No public exploit known

History#

Version 12015-09-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.