EUVD-2020-27798

Malware in sbrugna...

CVE-2020-6655

The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises du...

Remote code execution

The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises du...

Type confusion

Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability aris...

CVE-2020-6656 File parsing Type Confusion Remote code execution vulerability

Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability aris...

CVE-2020-6655 File parsing Out-Of-Bounds read remote code execution

The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises du...

PT-2021-12501

Name of the Vulnerable Software and Affected Versions: Eaton's easySoft software versions 7.00 through 7.20 Description: The issue arises due to improper validation of user data supplied through .E70 files, causing Type Confusion. A malicious entity can execute malicious code or make the...

CVE-2020-6656: Access of Resource Using Incompatible Type

Eaton's easySoft software v7.xx prior to v7.22 are susceptible to file parsing type confusion remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user upload a malformed .E70 file in the application. The vulnerability aris...

CVE-2020-6655: Out-of-bounds Read

The Eaton's easySoft software v7.xx prior to v7.22 are susceptible to Out-of-bounds remote code execution vulnerability. A malicious entity can execute a malicious code or make the application crash by tricking user to upload the malformed .E70 file in the application. The vulnerability arises du...

PT-2020-19208

Name of the Vulnerable Software and Affected Versions Eaton's 9000x Programming and Configuration Software versions 2.0.38 and prior Description A DLL Hijacking issue allows an attacker to execute arbitrary code by replacing required DLLs with malicious ones when the software attempts to load...

CVE-2020-6653

Eaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app. A malicious app or unauthorized user can harvest the information and later on can use the information to monitor and control the user's...

CVE-2020-6653 Sensitive date stored in logcat file

Eaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app. A malicious app or unauthorized user can harvest the information and later on can use the information to monitor and control the user's...

PT-2020-19207

Name of the Vulnerable Software and Affected Versions Eaton's Secure connect mobile app versions 1.7.3 and prior Description The issue allows unauthorized access to user login credentials. When a user creates or registers an account on the mobile app, the credentials are stored in the logcat file...

CVE-2020-6653: Exposure of Sensitive Information to an Unauthorized Actor

Eaton's Secure connect mobile app v1.7.3 & prior stores the user login credentials in logcat file when user create or register the account on the Mobile app. A malicious app or unauthorized user can harvest the information and later on can use the information to monitor and control the user's...

PT-2020-19205

Name of the Vulnerable Software and Affected Versions Eaton's Intelligent Power Manager IPM versions 1.67 and prior Description The issue is related to improper input validation on file names during configuration file import functionality. This allows attackers to perform command injection or cod...