CVE-2026-22614

MEDIUM

Eaton EasySoft < 8.41 - Insecure Password Storage via Weak Encryption

Title source: llm
STIX 2.1

Description

The encryption mechanism used in Eaton's EasySoft project file was insecure and susceptible to brute force attacks, an attacker with access to this file and the local host machine could potentially read the sensitive information stored and tamper with the project file. This security issue has been fixed in the latest version of Eaton EasySoft which is available on the Eaton download centre.

References (1)

Core 1

Scores

CVSS v3 6.1
EPSS 0.0008
EPSS Percentile 0.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-257
Status published
Products (1)
eaton/easysoft < 8.41
Published Mar 10, 2026
Tracked Since Mar 11, 2026