TI-2024-10758 CVE-2024-11611 · GHSA-9gg9-47pc-xh34
Memory corruption in AutomationDirect C-More EA9
Priority LOW 36
AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability.
Vulnerabilities
6 records
TI-2024-10757 CVE-2024-11610 · GHSA-47q3-7qj2-v84j
Memory corruption in AutomationDirect C-More EA9
Priority LOW 36
AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability.
TI-2024-10756 CVE-2024-11609 · GHSA-j3gr-cvww-7m69
Stack-based buffer overflow in AutomationDirect C-More EA9
Priority LOW 36
AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.
TI-2022-01861 CVE-2022-2006 · GHSA-qxq5-p7h4-x2vw
AutomationDirect C-more EA9 HMI Uncontrolled Search Path Element
Priority LOW 36
AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process.
TI-2022-01860 CVE-2022-2005 · GHSA-g8fh-5c5f-8vq4
AutomationDirect C-more EA9 HMI Cleartext Transmission
Priority MEDIUM 40
AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow an attacker to obtain the login credentials and login as a valid user.
TI-2020-05617 CVE-2020-6969 · GHSA-vvr7-5892-5mm9
Insufficiently protected credentials in C-More Touch Panels EA9 series
Priority MEDIUM 47
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and…