Eaton easyE4 PLC offers a device password protection functionality to facilitate a secure connection and prevent unauthorized access. It was observed that the device password was stored with a weak encoding algorithm in the easyE4 program file when exported to SD card (*.PRG file ending).
Weakness
Obscuring a password with a trivial encoding does not protect the password.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Easy-box-e4-ac1_firmware | Eaton | * | 2.02 (excluding) |