Easysoft
Monthly
ZenTao PMS before 22.3 permits authenticated low-privilege users to bypass group-based access controls by invoking any controller method whose name contains 'ajax', potentially exposing sensitive data and administrative actions. The flaw in commonModel::isOpenMethod() treats such methods as open, enabling calls such as task.ajaxGetByID, system.ajaxDBAuthUrl, and admin.ajaxChangeTableEngine to read records, retrieve database credentials, trigger CI jobs, and alter tables. Exploitation requires a valid low-privilege session; no public exploit was identified at time of analysis, and the vendor has released 22.3 with an explicit privilege allow-list. The issue is rated CVSS 4.0 7.1 (High) with high confidentiality impact and low integrity impact.
Eaton easySoft releases below 8.46 fail to properly validate the TLS certificate presented by easyE4 devices, allowing an attacker who already holds a man-in-the-middle position on the network path between the engineering client and the controller to intercept or modify that session. The assessed vector (AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) reflects the real gating factors - an adjacent MITM position plus an engineer initiating the connection - which keeps impact to partial confidentiality and integrity loss rather than device takeover. No public exploit code was identified at time of analysis, the vendor has released easySoft 8.46 as the fix, and the independent assessment rates this a moderate, not an emergency, priority.
Authenticated users can exploit an authorization bypass in ZenTao PMS through 22.6 to read and overwrite other users' comments by iterating sequential action IDs. This IDOR (CWE-639) in action::editComment allows low-privileged users to modify comments on bugs, stories, tasks, and documents in projects and products they cannot access, and view associated content and attachments. No public exploit code or active exploitation has been identified; the assessed CVSS 3.1 base score is 5.3 (moderate), requiring a valid authenticated session.
Eaton EasySoft project files use weak encryption vulnerable to brute force attacks, allowing local attackers with file access to extract sensitive information and modify project configurations. An authenticated user on the affected system can exploit this weakness to compromise confidentiality and integrity of stored data. No patch is currently available for this vulnerability.
Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
ZenTao PMS before 22.3 permits authenticated low-privilege users to bypass group-based access controls by invoking any controller method whose name contains 'ajax', potentially exposing sensitive data and administrative actions. The flaw in commonModel::isOpenMethod() treats such methods as open, enabling calls such as task.ajaxGetByID, system.ajaxDBAuthUrl, and admin.ajaxChangeTableEngine to read records, retrieve database credentials, trigger CI jobs, and alter tables. Exploitation requires a valid low-privilege session; no public exploit was identified at time of analysis, and the vendor has released 22.3 with an explicit privilege allow-list. The issue is rated CVSS 4.0 7.1 (High) with high confidentiality impact and low integrity impact.
Eaton easySoft releases below 8.46 fail to properly validate the TLS certificate presented by easyE4 devices, allowing an attacker who already holds a man-in-the-middle position on the network path between the engineering client and the controller to intercept or modify that session. The assessed vector (AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N) reflects the real gating factors - an adjacent MITM position plus an engineer initiating the connection - which keeps impact to partial confidentiality and integrity loss rather than device takeover. No public exploit code was identified at time of analysis, the vendor has released easySoft 8.46 as the fix, and the independent assessment rates this a moderate, not an emergency, priority.
Authenticated users can exploit an authorization bypass in ZenTao PMS through 22.6 to read and overwrite other users' comments by iterating sequential action IDs. This IDOR (CWE-639) in action::editComment allows low-privileged users to modify comments on bugs, stories, tasks, and documents in projects and products they cannot access, and view associated content and attachments. No public exploit code or active exploitation has been identified; the assessed CVSS 3.1 base score is 5.3 (moderate), requiring a valid authenticated session.
Eaton EasySoft project files use weak encryption vulnerable to brute force attacks, allowing local attackers with file access to extract sensitive information and modify project configurations. An authenticated user on the affected system can exploit this weakness to compromise confidentiality and integrity of stored data. No patch is currently available for this vulnerability.
Eaton easySoft software is used to program easy controllers and displays for configuring, programming and defining parameters for all the intelligent relays. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.