Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-41022

TLS Certificate Validation Failure in Eaton easySoft Allows Man-In-The-Middle Attacks

Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Eaton
Products
Easysoft
CVE-2026-22614

Insecure Encryption in Eaton EasySoft Project Files Leading to Brute Force Attack Vulnerability

The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine could potentially read the sensitive information stored and tamper with the project file. This security issue has been fixed in the latest version of Eaton EasySoft which is available on the Eaton download centre.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Eaton
Products
Easysoft
CVE-2023-43777

Insecure storage of password in easySoft

Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. This software has a password protection functionality to secure the project file from unauthorized access. This password was being stored insecurely and could be retrieved by skilled adversaries. 

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Eaton
Products
Easysoft
CVE-2020-6656

File parsing Type Confusion Remote code execution vulerability

Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability arises due to improper validation of user data supplied through E70 file which is causing Type Confusion.

CVSS 3.1 · 5.8 Medium EPSS 2.8% KEV · Not listed
Vendors
Eaton
Products
Easysoft
CVE-2020-6655

File parsing Out-Of-Bounds read remote code execution

The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises due to improper validation and parsing of the E70 file content by the application.

CVSS 3.1 · 5.8 Medium EPSS 2.8% KEV · Not listed
Vendors
Eaton
Products
Easysoft