Patch Ticker

EasyIO Neo IOManager and Tools Installer accepts malicious updates

Building control software could be tricked by fake updates.

Summary

Johnson Controls' EasyIO Neo IOManager and Tools Installer includes functionality from an untrusted source, allowing malicious software updates. Version 1.1.0.0 is affected.

What to do

We have not confirmed a fixed version yet. Check the source links below.

Products and platforms

  • Windows
  • EasyIO Neo IOManager and Tools Installer

CVE IDs

Times

First published

First seen