Vulnerability Intelligence Report
Insecure storage of password in easySoft
CVE-2023-43777
Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. This software has a password protection functionality to secure the project file from unauthorized access. This password was being stored insecurely and could be retrieved by skilled adversaries.
No Active Exploit Signals
CVSS Base Score
5.9
MEDIUM
Exploitability:1.7
Impact Score:3.8
EPSS Probability:0.28%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-256 ↗CWE-256 Plaintext Storage of a Password
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Eaton | easySoft | 0 < 8.01 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.278%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Eaton · Vendor · Ireland |
| Reserved | 2023-09-22T05:10:55 |
| Published | 2023-10-17T12:49:04 |
| Patch Date | 2023-10-19 |
| Last Updated | 2024-09-13T16:26:39 |
Community Chatter & Buzz