Read the docs
TI-2024-16588 Aliases CVE-2024-25137GHSA-pr88-vhj7-4qvr

AutomationDirect C-MORE EA9 HMI Stack-based Buffer Overflow

Priority LOW 20CWE-121Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may lead to a stack overflow. The result of this stack-based buffer overflow can lead to denial-of-service conditions.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0045 39th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AutomationDirectC-MORE EA9 HMI EA9-T6CLup to 6.77—No fix listedCNA
AutomationDirectC-MORE EA9 HMI EA9-T7CLup to 6.77—No fix listedCNA
AutomationDirectC-MORE EA9 HMI EA0-T7CL-Rup to 6.77—No fix listedCNA
AutomationDirectC-MORE EA9 HMI EA9-T8CLup to 6.77—No fix listedCNA
AutomationDirectC-MORE EA9 HMI EA9-T10CLup to 6.77—No fix listedCNA
AutomationDirectC-MORE EA9 HMI EA9-T10WCLup to 6.77—No fix listedCNA
AutomationDirectC-MORE EA9 HMI EA9-T12CLup to 6.77—No fix listedCNA
AutomationDirectC-MORE EA9 HMI EA9-T15CLup to 6.77—No fix listedCNA
AutomationDirectC-MORE EA9 HMI EA9-T15CL-Rup to 6.77—No fix listedCNA
AutomationDirectC-MORE EA9 HMI EA9-RHMIup to 6.77—No fix listedCNA
AutomationDirectC-MORE EA9 HMI EA9-PGMSWup to 6.77—No fix listedCNA
  • C-MORE EA9 HMI EA9-T6CL VendorAutomationDirect Affected up to 6.77 Fixed in — No fix listed CNA
  • C-MORE EA9 HMI EA9-T7CL VendorAutomationDirect Affected up to 6.77 Fixed in — No fix listed CNA
  • C-MORE EA9 HMI EA0-T7CL-R VendorAutomationDirect Affected up to 6.77 Fixed in — No fix listed CNA
  • C-MORE EA9 HMI EA9-T8CL VendorAutomationDirect Affected up to 6.77 Fixed in — No fix listed CNA
  • C-MORE EA9 HMI EA9-T10CL VendorAutomationDirect Affected up to 6.77 Fixed in — No fix listed CNA
  • C-MORE EA9 HMI EA9-T10WCL VendorAutomationDirect Affected up to 6.77 Fixed in — No fix listed CNA
  • C-MORE EA9 HMI EA9-T12CL VendorAutomationDirect Affected up to 6.77 Fixed in — No fix listed CNA
  • C-MORE EA9 HMI EA9-T15CL VendorAutomationDirect Affected up to 6.77 Fixed in — No fix listed CNA
  • C-MORE EA9 HMI EA9-T15CL-R VendorAutomationDirect Affected up to 6.77 Fixed in — No fix listed CNA
  • C-MORE EA9 HMI EA9-RHMI VendorAutomationDirect Affected up to 6.77 Fixed in — No fix listed CNA
  • C-MORE EA9 HMI EA9-PGMSW VendorAutomationDirect Affected up to 6.77 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-25137
  2. 2026-10-03 Alias added: GHSA-pr88-vhj7-4qvr

References

Other 1

  • TI-2024-14467 A leftover debug code vulnerability exists in the Telnet Diagnostic Interface… CVSS 3.1CRITICAL 9.8
  • TI-2024-14780 Improper access control in AutomationDirect P3-550E CVSS 3.1CRITICAL 9.1
  • TI-2025-24868 AutomationDirect MB-Gateway Missing Authentication for Critical Function CVSS 4.0CRITICAL 10.0
  • TI-2024-16461 Stack-based buffer overflow in AutomationDirect P3-550E CVSS 3.1CRITICAL 9.8
  • TI-2024-16460 Stack-based buffer overflow in AutomationDirect P3-550E CVSS 3.1CRITICAL 9.8
  • TI-2021-12594 Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel CVSS 3.1CRITICAL 9.8
See all 66 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences