Description
Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between easySoft and easyE4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Eaton | easySoft | < 8.46 | 8.46 |