{"schema":"threatline.record/2","record":{"id":"CVE-2026-41020","aliases":[],"summary":"Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain ","details":"Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.","categories":["Unclassified"],"product":"easyE4","vendor":"Eaton","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-41020","source_modified_at":"2026-10-27T11:05:51.545Z","fetched_at":"2026-10-27T16:27:21.584480Z","product":"easyE4","vendor":"Eaton","versions":[{"status":"affected","version":"0","lessThan":"2.46","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-41020","source_modified_at":"2026-10-27T11:05:51.545Z","fetched_at":"2026-10-27T16:27:21.584480Z","package":{"name":"easyE4","ecosystem":null},"version":"2.46","basis":"first unaffected version stated in the CVE record"}],"cvss":7.5,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-27T11:05:51.545Z","modified_at":"2026-10-27T11:05:51.545Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-41020","fetched_at":"2026-10-27T16:27:21.584480Z","source_modified_at":"2026-10-27T11:05:51.545Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-va-2026-1017.pdf","tags":["vendor-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-27T11:05:51.545Z","content_hash":"80c2ac42d94abe03e452c3207f14c863038cc2c5e188bacbfc145cf3258570c6"}}