CVE-2023-43777CWE-256

Insecure storage of password in easySoft

Medium · published October 17, 2023

CVSS v3.1
5.9
EPSS
0%
Percentile
23.9
In the wild
Unconfirmed
What it is

Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. This software has a password protection functionality to secure the project file from unauthorized access. This password was being stored insecurely and could be retrieved by skilled adversaries.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.9th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2023-10-17T12:49Z
EPSS history
Timeline
  • 17 OCT 12:49Z
    Insecure storage of password in easySoft
    cvelistv5