Read the docs

AutomationDirect

Records67All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

AutomationDirect records in CISA KEV

No AutomationDirect vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
P3-550e Firmware 15 records HIGH P1-540 Firmware 9 records HIGH P1-550 Firmware 9 records HIGH P2-550 Firmware 9 records HIGH P3-530 Firmware 9 records HIGH P3-550 Firmware 9 records HIGH C-more Ea9-t10cl Firmware 6 records MEDIUM C-more Ea9-t10wcl Firmware 6 records MEDIUM

Records

6 records in C-more Ea9-t10wcl Firmware · all components

TI-2020-05617 CVE-2020-6969 · GHSA-vvr7-5892-5mm9

Insufficiently protected credentials in C-More Touch Panels EA9 series

Priority MEDIUM 47

It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02374 Published 2020-02-05 No fix listed CWE-522
TI-2022-01860 CVE-2022-2005 · GHSA-g8fh-5c5f-8vq4

AutomationDirect C-more EA9 HMI Cleartext Transmission

Priority MEDIUM 40

AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow an attacker to obtain the login credentials and login as a valid user.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00551 Published 2022-08-31 Fixed in 6.73 CWE-319
TI-2024-10758 CVE-2024-11611 · GHSA-9gg9-47pc-xh34

Memory corruption in AutomationDirect C-More EA9

Priority LOW 36

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00277 Published 2025-01-30 No fix listed CWE-119
TI-2024-10757 CVE-2024-11610 · GHSA-47q3-7qj2-v84j

Memory corruption in AutomationDirect C-More EA9

Priority LOW 36

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00277 Published 2025-01-30 No fix listed CWE-119
TI-2022-01861 CVE-2022-2006 · GHSA-qxq5-p7h4-x2vw

AutomationDirect C-more EA9 HMI Uncontrolled Search Path Element

Priority LOW 36

AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00357 Published 2022-08-31 Fixed in 6.73 CWE-427
Open these records in search →