Eaton easyE4 uses a static nonce during authentication, enabling an attacker who captures a valid authentication exchange to replay it and gain unauthorized access to the device. This flaw allows the attacker to impersonate an authorized user without possessing any legitimate credentials and can expose sensitive configuration or monitoring data.

Eaton easyE4 devices are affected. The specific firmware versions that are vulnerable are not listed in the available data; however, any firmware employing a static nonce for authentication could be affected.

The CVSS score of 7.5 indicates a high severity level, and while no EPSS score is currently available, the potential for exploitation is evident if an attacker can eavesdrop on network traffic. The vulnerability is not listed in CISA’s KEV catalog, but the ability to replay authentication exchanges presents a clear attack vector that could be leveraged in a remote exploitation scenario, especially in environments where device traffic is unencrypted.