CVE-2024-57811: Critical severity eaton x303 vulnerability
In Eaton X303 3.5.16 - X303 3.5.17 Build 712, an attacker with network access to a XC-303 PLC can login as root over SSH. The root password is hardcoded in the firmware. NOTE: This vulnerability appears in versions that are no longer supported by Eaton.
Affected Software
Event History
Frequently Asked Questions
What vulnerabilities are associated with CVE-2024-57811?
CVE-2024-57811 allows an attacker to log in as root via SSH due to a hardcoded password in the Eaton X303 firmware.
What are the affected versions for CVE-2024-57811?
CVE-2024-57811 affects Eaton X303 versions 3.5.16 to 3.5.17 Build 712.
How can I mitigate the risks of CVE-2024-57811?
To mitigate CVE-2024-57811, it is recommended to upgrade to a newer, supported version of the Eaton X303 firmware.
What is the severity level of CVE-2024-57811?
CVE-2024-57811 is considered a critical vulnerability due to the potential for unauthorized root access.
Is there a patch available for CVE-2024-57811?
There are no patches available for CVE-2024-57811 as it appears in versions that are no longer supported by Eaton.