Approved changes feed: RSS · Atom

cpe:2.3:a:eaton:easye4:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEaton (b7450635-db8f-5426-bd84-6f4be38222d9)
ProductEasye4 (2a2490be-23a1-5ed6-954d-366c4e07aeb6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-41021 vulnerable 2026-11-03 10:17:05.855242 Details available
HIGH (7.5)
Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials.
Published: 2026-10-27T11:23:34.366Z
Updated: 2026-11-04T20:29:12.601Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41020 vulnerable 2026-11-03 10:17:05.571870 Details available
HIGH (7.5)
Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.
Published: 2026-10-27T11:05:51.545Z
Updated: 2026-11-04T20:29:24.866Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43776 vulnerable 2026-06-08 06:12:37.960189 Weak encoding vulnerability in easyE4
MEDIUM (6.8)
Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending).
Published: 2023-10-17T12:35:09.849Z
Updated: 2024-09-13T16:27:22.502Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.