Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Priority LOW 26

The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine could potentially read the sensitive inf…

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.0009 Published 2026-03-10 Fixed in 8.4 CWE-257
TI-2023-23472 CVE-2023-43777 · GHSA-m6cj-mh5r-8m7w

Insecure storage of password in easySoft

Priority LOW 29

Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00321 Published 2023-10-17 Fixed in 8.01 CWE-256
Priority LOW 39

Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02823 Published 2021-01-07 Fixed in v7.22 CWE-20
Priority LOW 39

The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02769 Published 2021-01-07 Fixed in v7.22 CWE-125