CVE-2020-6656

Eaton EASYsoft vulnerable to a Type Confusion/file parsing issue in v7.xx prior to v7.22 (affecting v7.20 and earlier). The flaw allows malformed .E70 files to crash or potentially execute code; ICS-CISA notes local access and not remote exploitation, with patch available to v7.22. Remediation: u...

CVE-2020-6655

Eaton easySoft software v7.xx before 7.22 is affected by an out-of-bounds parsing/validation vulnerability in .E70 files, enabling local code execution or application crash. Root cause: improper parsing of E70 content. Affected products: easySoft v7.xx up to 7.21. Mitigation: upgrade to v7.22 (pa...

CVE-2023-43777

CVE-2023-43777 affects Eaton easySoft software used to program easy controllers and displays. The root issue is insecure storage of the project password, which could be retrieved by skilled adversaries, leading to potential unauthorized access to protected files. Documents confirm the password pr...

CVE-2026-22614

The CVE covers an insecure encryption mechanism in Eaton’s EasySoft project files. The vulnerability arises from weak/enabled brute-force‑susceptible encryption within the project file, which could allow an attacker with access to the local host and the file to read sensitive information and tamp...