CVE-2015-3974

no score yetEPSS 1.9%

EasyIO EasyIO-30P-SF controllers with firmware before 0.5.21 and 2.x before 2.0.5.21, as used in Accutrol, Bar-Tech Automation, Infocon/EasyIO, Honeywell Automation India, Johnson Controls, SyxthSENSE, Transformative Wave Technologies, Tridium Asia Pacific, and Tridium Europe products, have a hardcoded password, which makes it easier for remote attackers to obtain access via unspecified vectors.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
CWE: CWE-255
Published: 2015-09-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

easyio:easyio-30p-sf
easyio:easyio-30p-sf_firmware

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-237-02
https://ics-cert.us-cert.gov/advisories/ICSA-15-237-02

Check your stack JSON