CVE-2023-43777: Insecure storage of password in easySoft
Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. This software has a password protection functionality to secure the project file from unauthorized access. This password was being stored insecurely and could be retrieved by skilled adversaries.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-43777?
CVE-2023-43777 is a vulnerability in the Eaton easySoft software that allows unauthorized access to project files due to insecure password storage.
How does the Eaton easySoft software work?
The Eaton easySoft software is used to program easy controllers and displays for configuring, programming, and defining parameters for intelligent relays.
What is the severity of CVE-2023-43777?
CVE-2023-43777 has a severity rating of medium with a value of 6.5.
How can I fix CVE-2023-43777?
To fix CVE-2023-43777, it is recommended to apply the security update provided by Eaton and follow their instructions.
Where can I find more information about CVE-2023-43777?
You can find more information about CVE-2023-43777 in the security bulletin published by Eaton at the following link: [https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2023-1011.pdf](https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2023-1011.pdf)