Weak encoding vulnerability in easyE4
CVE-2023-43776

6.8MEDIUM

Key Information:

Vendor

Eaton

Status
Easye4
Vendor
CVE Published:
17 October 2023

Badges

👾 Exploit Exists

What is CVE-2023-43776?

Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending).

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

easyE4 0

References

https://www.eaton.com/content/dam/eaton/company/news-insi...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Manuel Stotz (SySS GmbH)
JSON
.