Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2023-43776

Weak encoding vulnerability in easyE4

Description

Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eaton easyE4

Default version status: affected

  • 0 to < 2.02affected

References