CVE-2026-41020

13th percentile - higher than 13% of all known CVEs

Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.

Could lead to unauthorized device access via replay attack. High risk for control devices in industrial networks.

Update the firmware to a patched version or restrict network access to the device. Monitor for suspicious authentication traffic.