CVE-2024-31415 - CVE House
Back to Database
Status published Medium CVE-2024-31415

The Eaton Foreseer software provides the feasibility for the user...

Vulnerability Description

The Eaton Foreseer software provides the feasibility for the user to configure external servers for multiple purposes such as network management, user management, etc. The software uses encryption to store these configurations securely on the host machine. However, the keys used for this encryption were insecurely stored, which could be abused to possibly change or remove the server configuration.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-31415

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Joseph Yim

References

More from Eaton

View All →
CVE-2025-67450
Due to insecure library loading in the Eaton UPS Companion...
High 7.8
CVE-2025-59890
Improper input sanitization in the file archives upload functionality of...
High 7.3
CVE-2025-59889
Improper authentication of library files in the Eaton IPP software...
High 8.6
CVE-2025-59888
Improper quotation in search paths in the Eaton UPS Companion...
Medium 6.7
CVE-2025-59887
Improper authentication of library files in the Eaton UPS Companion...
High 8.6

Affected Vendor

Affected Software

Foreseer
Vulnerable Versions:
0

Timeline

Official Publish: September 13th, 2024
Last Modified: August 26th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L

Weaknesses (CWE)

CWE-312

MITRE ATT&CK TTPs

T1005 Data from Local System
Collection
T1552 Unsecured Credentials
Credential Access
T1530 Data from Cloud Storage
Collection
T1078 Valid Accounts
Persistence
T1041 Exfiltration Over C2 Channel
Exfiltration