CVE-2023-43776 — Weak encoding vulnerability in easyE4
Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password wa…
Published: 2023-10-17 · CVSS: 6.8 · CVSS 3.1
Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7