Eaton Alert
1697Warning Date
Severity Level
Warning Number
Target Sector
10 January, 2021
● Medium
2021-2297
Energy - Water and Utilities - Manufacturing
Description:
Eaton has released security update to address multiple vulnerabilities in the following product :
- Versions 7.20 and prior of EASYsoft
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Unauthorized modification
- Execute arbitrary code
Best practice and Recommendations:
Eaton recommends the following mitigations and compensating controls in order to reduce risk associated with this vulnerability:
- Limit physical access System to only authorized users.
- Isolate impacted systems and only connect them to trusted systems.
- Monitor and investigate unplanned reboots of systems using network monitoring tools provided by IT departments.