easyE4 vulnerabilities
2 known vulnerabilities in easyE4 from Eaton. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
easyE4: Weak Password Requirements
Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials.
- 7.5 High severity
easyE4: Authentication Bypass by Capture-replay
Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.