Johnson Controls EasyIO Neo IOManager sensitive data left unencrypted in memory
Sensitive data inside a management program can be read by anyone.
Summary
Sensitive information is stored in cleartext in memory in Johnson Controls EasyIO Neo IOManager and Tools Installer, so an attacker can retrieve it. Version 1.1.0.0 is affected.
What to do
We have not confirmed a fixed version yet. Check the source links below.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen