CVE-2024-31415CWE-312

The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user…

Medium · published September 13, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on the host machine. However, the keys used for this encryption were insecurely stored, which could be abused to possibly change or remove the server configuration.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00119 · 1.7th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2024-09-13T16:48Z
EPSS history
Timeline
  • 13 SEP 16:48Z
    The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user…
    cvelistv5