CVSS 3.1
6.6 mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2023-43776
Medium (6.6) in eaton. EPSS 0.1% chance of exploitation in the next 30 days.
Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending).
Severity
- EPSS
- 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-326, CWE-261
- Published
- Modified
- Record from
- the NVD, synced
Affected
- eaton:easy-box-e4-ac1_firmware
- eaton:easy-box-e4-dc1_firmware
- eaton:easy-box-e4-uc1_firmware
- eaton:easy-e4-ac-12rc1p_firmware
- eaton:easy-e4-ac-12rcx1p_firmware
- eaton:easy-e4-ac-16re1p_firmware
- eaton:easy-e4-dc-12tc1p_firmware
- eaton:easy-e4-dc-12tcx1p_firmware
- eaton:easy-e4-dc-16te1p_firmware
- eaton:easy-e4-dc-4pe1p_firmware
- eaton:easy-e4-dc-6ae1p_firmware
- eaton:easy-e4-dc-8te1p_firmware
- eaton:easy-e4-uc-12rc1p_firmware
- eaton:easy-e4-uc-12rcx1p_firmware
- eaton:easy-e4-uc-16re1_firmware
- eaton:easy-e4-uc-16re1p_firmware
- eaton:easy-e4-uc-8re1p_firmware
- eaton:easy_e4-ac-8re1p_firmware
- eaton:xv-102-a035tqrb-1e4_firmware
- eaton:xv-102-a3-57tvrb-1e4_firmware
- eaton:xv100-box-e4-dc1_firmware
- eaton:xv100-box-e4-uc1_firmware