Eaton easyE4 devices implement an insufficiently strong password policy. This weakness allows an attacker who obtains password hashes, potentially via related vulnerabilities such as CVE-2026-41020, to conduct offline password-guessing attacks and possibly recover user credentials. The vulnerability is rated high severity with a CVSS score of 7.5.