Eaton easySoft does not properly validate TLS certificates presented by easyE4 devices, allowing a network-adjacent attacker to potentially perform man-in-the-middle attacks. This vulnerability could enable interception or modification of communications between easySoft and easyE4 devices.