CVE-2018-15819

EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js...

CVE-2018-15820

EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...

CVE-2018-15819

EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js...

CVE-2018-15820

EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...

Design/Logic Flaw

EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...

Design/Logic Flaw

EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js...

CVE-2018-15820

EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...

CVE-2018-15820

CVE-2018-15820 affects EasyIO-30P controllers prior to version 2.0.5.27, where the web interface (dev.htm GDN parameter) is vulnerable to stored XSS. The vulnerability enables cross-site scripting within the device’s web UI and is listed with remote-exploit capability; a patch is noted by sources...

CVE-2018-15819

CVE-2018-15819 affects EasyIO-30P controllers (versions before 2.0.5.27). The vulnerability arises from Incorrect Access Control in the web interface (webuser.js), enabling authentication bypass. Connected sources also note associated cross‑site scripting issues (CVE-2018-15820) and remote exploi...

CVE-2018-15819

EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js...

CVE-2018-15820: Improper Neutralization of Input During Web Page Generation

EasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter...

CVE-2018-15819: Improper Authentication

EasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js...

EasyIO 30P Controller Detection (HTTP)

HTTP based detection of EasyIO 30P controllers. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

EasyIO 30P Authentication Bypass / Cross Site Scripting Vulnerabilities

EasyIO 30P versions prior to 2.0.5.27 suffer from authentication bypass and cross site scripting vulnerabilities. EasyIO 30P Authentication Bypass / Cross Site Scripting Vulnerabilities INFORMATION Product: EasyIO 30P http://www.easyio.com Affected versions: 2.0.5.27 tested on version 2.0.5.16 CV...

PT-2019-9191

Name of the Vulnerable Software and Affected Versions EasyIO EasyIO-30P versions prior to 2.0.5.27 Description The issue allows for XSS via the GDN parameter in the dev.htm endpoint. Recommendations For versions prior to 2.0.5.27, update to version 2.0.5.27 or later to resolve the issue. As a...

PT-2019-9190

Name of the Vulnerable Software and Affected Versions EasyIO EasyIO-30P versions prior to 2.0.5.27 Description The issue is related to Incorrect Access Control in the webuser.js file. Recommendations For versions prior to 2.0.5.27, update to version 2.0.5.27 or later to resolve the issue...

EasyIO 30P Authentication Bypass / Cross Site Scripting

INFORMATION Product: EasyIO 30P http://www.easyio.com Affected versions: 2.0.5.27 tested on version 2.0.5.16 CVE IDs: CVE-2018-15820 Stored XSS and CVE-2018-15819 Authentication bypass Remote-exploit: yes TIMELINE Vendor notification: 3rd August, 2018 Vendor acknowledgment: 22nd August, 2018 Patc...

EasyIO Detection (BACNET)

Detection of EasyIO Devices Tries to detect EasyIO devices over the BACnet protocol. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

EasyIO Multiple Vulnerabilities (Dec 2016)

EasyIO FG-series devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:easyio:easyio";...

EasyIO Detection

The script performs HTTP based detection of EasyIO SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...