Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-41022

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Eaton

Description

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eaton easySoft

Default version status: unaffected

  • 0 to < 8.46affected

References