Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. This software has a password protection functionality to secure the project file from unauthorized access. This password was being stored insecurely and could be retrieved by skilled adversaries.
References
Link | Resource |
---|---|
https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2023-1011.pdf | Vendor Advisory |
Configurations
History
25 Oct 2023, 12:34
Type | Values Removed | Values Added |
---|---|---|
First Time |
Eaton easysoft
Eaton |
|
CPE | cpe:2.3:a:eaton:easysoft:*:*:*:*:*:*:*:* | |
CWE | CWE-522 | |
References | (MISC) https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2023-1011.pdf - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
17 Oct 2023, 13:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-10-17 13:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-43777
Mitre link : CVE-2023-43777
CVE.ORG link : CVE-2023-43777
JSON object : View
Products Affected
eaton
- easysoft