92 matches found
Johnson Controls EasyIO Neo Series EC and CW Controllers
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker tointercept and read sensitive information, including credentials andsession data. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...
Johnson Controls EasyIO Neo Series EC and CW Controllers
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information that could be used to conduct further attacks against the system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...
PT-2026-104025
Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.0b63 Description An OS Command Injection flaw exists in Johnson Controls EasyIO FS32, which allows an attacker to execute arbitrary operating system commands on the affected device. Recommendations Update EasyIO...
PT-2026-104026
Name of the Vulnerable Software and Affected Versions Johnson Controls EasyIO FS32 versions prior to 3.0b63 Description An External Control of File Name or Path issue allows a path traversal attack. This occurs when the software does not properly validate user-supplied input used to construct a...
CVE-2026-27873: Use of Hard-coded Credentials
Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52...
PT-2026-104030
Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52...
PT-2026-104024
Name of the Vulnerable Software and Affected Versions Johnson Controls EasyIO FS32 versions prior to 3.0b63 Description An OS Command Injection flaw exists in the system, which allows an attacker to execute arbitrary operating system commands. Recommendations Update Johnson Controls EasyIO FS32 t...
PT-2026-104020
Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.0b63 Description Johnson Controls EasyIO FS32 contains hard-coded credentials, which allows an attacker to exploit these default credentials to gain unauthorized access to the system. Recommendations Update Easy...
PT-2026-104052
Name of the Vulnerable Software and Affected Versions EasyIO NEO versions prior to 3.3b25 Description Cleartext transmission of sensitive information allows for Man In the Middle attacks, where an attacker intercepts data between two parties. In this case, attackers can intercept credentials via...
PT-2026-104023
Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.0b63 Description Johnson Controls EasyIO FS32 contains a hard-coded cryptographic key, which is a fixed secret used for encryption or decryption. This flaw allows an attacker to retrieve embedded sensitive data...
PT-2026-104022
Name of the Vulnerable Software and Affected Versions Johnson Controls EasyIO FS32 versions prior to 3.0b63 Description An insecure default initialization of resource allows for authentication abuse. Recommendations Update Johnson Controls EasyIO FS32 to version 3.0b63 or later...
PT-2026-104021
Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.3b63 Description An On-Chip Debug Interface issue in Johnson Controls EasyIO FS32 allows the collection of data from common resource locations, leading to information disclosure. Recommendations Update EasyIO FS...
CVE-2022-26643
An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application...
EUVD-2018-7678
Malware in sbrugna...
EUVD-2015-4005
Malware in sbrugna...
EUVD-2018-7677
Malware in sbrugna...
EUVD-2022-31197
Malicious code in bioql PyPI...
CVE-2022-26643
An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application...
