CVE-2023-43776

Weak encoding vulnerability in easyE4

Published Oct 17, 2023 CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Description
Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending).

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-48153 Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending).
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Eaton
Published
Updated
Sep 13, 2024, 4:27 PM
Reserved
Sep 22, 2023, 5:10 AM
Status
Modified
Published
Oct 17, 2023, 1:15 PM
Modified
Jun 17, 2026, 6:26 AM