CVE-2024-31415

Katalog CVE

CVSS 8.1 · High EPSS 0,12%

Kerentanan Cleartext Storage of Sensitive Information pada eaton foreseer electrical power monitoring system. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on the host machine. However, the keys used for this encryption were insecurely stored, which could be abused to possibly change or remove the server configuration.

Rincian

Terbit di NVD

13 September 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-312: Cleartext Storage of Sensitive Information
CWE-522: Insufficiently Protected Credentials

EPSS (30 hari)

0,12% peluang dieksploitasi; lebih tinggi dari 1,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2024-100... mitigasi · advisory vendor