What is CVE-2024-31415?

CVE-2024-31415 is a medium-severity vulnerability in Eaton Foreseer, classified under Cleartext Storage of Sensitive Information. CVSS score: 6.3/10. Published 2024-09-13.

How severe is CVE-2024-31415?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Is CVE-2024-31415 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Eaton Foreseer

CVE-2024-31415

The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on…

EPSS: 0.001 (2.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L.

Affected products

Eaton Foreseer — versions 0
Eaton Foreseer_electrical_power_monitoring_system

Weakness classification (CWE)

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

CybersecurityCOE@eaton.com (Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2024-31415?: CVE-2024-31415 is a medium-severity vulnerability in Eaton Foreseer, classified under Cleartext Storage of Sensitive Information. CVSS score: 6.3/10. Published 2024-09-13.
How severe is CVE-2024-31415?: Medium severity. CVSS v3 base score is 6.3 out of 10.
Is CVE-2024-31415 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.