CVE-2015-3974

EasyIO EasyIO-30P-SF controllers with firmware before 0.5.21 and 2.x before 2.0.5.21, as used in Accutrol, Bar-Tech Automation, Infocon/EasyIO, Honeywell Automation India, Johnson Controls, SyxthSENSE, Transformative Wave Technologies, Tridium Asia Pacific, and Tridium Europe products, have a hardcoded password, which makes it easier for remote attackers to obtain access via unspecified vectors.

• CWE-255

• https://ics-cert.us-cert.gov/advisories/ICSA-15-237-02Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-237-02Third Party Advisory, US Government Resource

Published

Sep 28, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3968The FTP service on Janitza UMG 508, 509, 511, 604, and 605 d…
• CVE-2015-3969Janitza UMG 508, 509, 511, 604, and 605 devices allow remote…
• CVE-2015-3970Multiple cross-site scripting (XSS) vulnerabilities in the w…
• CVE-2015-3971The debug interface on Janitza UMG 508, 509, 511, 604, and 6…
• CVE-2015-3972The web interface on Janitza UMG 508, 509, 511, 604, and 605…
• CVE-2015-3973Janitza UMG 508, 509, 511, 604, and 605 devices improperly g…
• CVE-2015-3975Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-3976Cross-site scripting (XSS) vulnerability in GE Multilink ML8…
• CVE-2015-3977Buffer overflow in Schneider Electric IMT25 Magnetic Flow DT…
• CVE-2015-3978SAP Sybase Unwired Platform Online Data Proxy allows local u…
• CVE-2015-3979Unspecified vulnerability in the Business Rules Framework (C…
• CVE-2015-3980SQL injection vulnerability in the Business Rules Framework …