CVE-2024-31415: eaton foreseer
Vulnerability summary
CVE-2024-31415 is a high (CVSS 8.1) vulnerability in eaton foreseer. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.6% of scored vulnerabilities.
Timeline
- 13-09-2024PublishedVulnerability first disclosed.
- 26-08-2025Last modifiedVulnerability information updated.
Description
The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on the host machine. However, the keys used for this encryption were insecurely stored, which could be abused to possibly change or remove the server configuration.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA6.3MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:LDiffers
EPSS trend
Probability
0.12%
Chance of exploitation in the next 30 days
Percentile
2%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.12% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-312Cleartext Storage of Sensitive InformationThe product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
- CWE-522Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Affected systems
Eaton2 products
- foreseer< 7.8.500
- foreseer_electrical_power_monitoring_system< 7.8.600
1 vendor · 2 products