QID 591396

Date Published: 2023-04-03

QID 591396: Eaton Power Xpert Meter 4000/6000/8000 password less authentication Vulnerability (ETN-VA-2018-1005)

AFFECTED PRODUCTS
Power Xpert Meter 4000/6000/8000: firmware versions 13.3 and below

QID Detection Logic:
This QID checks for the Vulnerable version of Eaton Power Xpert Meter 4000/6000/8000 using passive scanning.

Product shipped with a public/private key pair on Power Xpert Meter hardware that allows password less authentication to any accessible Power Xpert Meter.

CVSS V3 rated as Low - 0 severity.

CVSS V2 rated as Low - 0 severity.

Solution

Customers are advised to refer to Eaton MITIGATIONS section ETN-VA-2018-1005 for affected packages and patching details.

Vendor References

ETN-VA-2018-1005 - www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/PXM-Advisory.pdf

CVEs related to QID 591396

Software Advisories

Advisory ID	Software	Component	Link
ETN-VA-2018-1005			www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/PXM-Advisory.pdf

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].