Default credentials

2023-10-1713:15:00

PRIOn knowledge base

www.prio-n.com

default credentials

eaton easye4 plc

weak encoding algorithm

device password protection

unauthorized access

nvd

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.5%

JSON

Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending).

CPENameOperatorVersion
easy-box-e4-ac1_firmwarelt2.02
easy-box-e4-dc1_firmwarelt2.02
easy-box-e4-uc1_firmwarelt2.02
easy-e4-ac-12rc1p_firmwarelt2.02
easy-e4-ac-12rcx1p_firmwarelt2.02
easy-e4-ac-16re1p_firmwarelt2.02
easy-e4-dc-12tc1p_firmwarelt2.02
easy-e4-dc-12tcx1p_firmwarelt2.02
easy-e4-dc-16te1p_firmwarelt2.02
easy-e4-dc-4pe1p_firmwarelt2.02

Name	Operator	Version
easy-box-e4-ac1_firmware	lt	2.02
easy-box-e4-dc1_firmware	lt	2.02
easy-box-e4-uc1_firmware	lt	2.02
easy-e4-ac-12rc1p_firmware	lt	2.02
easy-e4-ac-12rcx1p_firmware	lt	2.02
easy-e4-ac-16re1p_firmware	lt	2.02
easy-e4-dc-12tc1p_firmware	lt	2.02
easy-e4-dc-12tcx1p_firmware	lt	2.02
easy-e4-dc-16te1p_firmware	lt	2.02
easy-e4-dc-4pe1p_firmware	lt	2.02