Threats tagged 'ghsa-w5q8-fpmg-jrm2'

A vulnerability exists in Johnson Controls EasyIO Neo IOManager and Tools Installer version 1.1.0.0 that allows inclusion of functionality from an untrusted control sphere, enabling malicious software updates. This flaw could be exploited by an attacker with limited privileges and user interaction, but requires physical access. The vulnerability has a high severity rating with a CVSS 4.0 score of 7.3. No patch or remediation information is currently available.