PT-2025-3587 · Eaton · Eaton X303

Haroldm · Published 2025-01-13 · Updated 2025-01-16 · CVE-2024-57811

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

The software that is vulnerable is the Eaton X303, specifically versions 3.5.16 to 3.5.17 Build 712. The vulnerability is a hardcoded root password in the firmware, which allows an attacker with network access to a XC-303 PLC to login as root over SSH. It's worth noting that this vulnerability appears in versions that are no longer supported by Eaton. There is a public reference to this vulnerability, but it does not specify whether it has been exploited by attackers or if there is a public exploit available. The vulnerability can be exploited by attackers who have network access to the XC-303 PLC. #EatonX303 #CVE202457811 #HardcodedRootPassword #XC303PLC #SSHAccess #Eaton #Vulnerability #PLC #SSH #RootAccess

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2024-57811

Affected Products

Eaton X303

References · 5

• 🔥 https://github.com/google/security-research/security/advisories/GHSA-xf7j-4x67-6h93 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-57811 · Security Note
• https://twitter.com/VulmonFeeds/status/1878949838944948494 · Twitter Post
• https://twitter.com/CVEnew/status/1878922548026462421 · Twitter Post
• https://t.me/cvedetector/15189 · Telegram Post