← Back to home
ICSA-21-007-03  ·  Published 2021-01-26  ·  View on CISA ICS-CERT ↗

Eaton EASYsoft (Update A)

CVSS 5.8 MEDIUM

Risk Summary

Successful exploitation of these vulnerabilities could allow a local attacker to modify or crash the program.

Remediations

  • Eaton has patched the issues and released Version 7.22, which can be downloaded from Eaton's website.
  • Navigate to Eaton software download center -> Select “Software” -> “easySoft” -> v7.22
  • Eaton recommends those affected by the report vulnerabilities use only .E70 files created from a fully trusted source.
  • If the application crashes due to .E70 file upload, restart the application and do not upload the .E70 file again.

Affected Vendors

Eaton

Affected Products (1)

Eaton · EASYsoft <= 7.20

Affected Sectors

Critical Manufacturing, Energy, Water and Wastewater Systems

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more