CVE-2023-43776

CVSS V2 None CVSS V3 None

Description

Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending).

Overview

CVE ID
CVE-2023-43776

Assigner
Eaton

Vulnerability Status
PUBLISHED

Published Version
2023-10-17T12:35:09.849Z

Last Modified Date
2023-10-17T12:35:09.849Z

Weakness Enumerations

CWE	URL
CWE-261	http://cwe.mitre.org/data/definitions/261.html

References

Reference URL	Reference Tags
https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2023-1010.pdf

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-43776
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-43776

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 16:12:15				Added to TrackCVE