CVE-2024-11609 AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

🗓️ 30 Jan 2025 20:18:26Reported by zdiType

CVE-2024-11609 allows remote code execution via file parsing buffer overflow in C-More EA9 installations.

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the C-more Programming Software for programming and configuring sensor panels (EA9 Series) lies in buffer overflows in the stack, allowing an attacker to execute arbitrary code.	18 Mar 202500:00	–	bdu_fstec
Circl	CVE-2024-11609	5 Dec 202411:00	–	circl
CNNVD	AutomationDirect C-More EA9 Programming Software 安全漏洞	30 Jan 202500:00	–	cnnvd
CVE	CVE-2024-11609	30 Jan 202520:18	–	cve
EUVD	EUVD-2024-34400	3 Oct 202520:07	–	euvd
ICS	AutomationDirect C-More EA9 Programming Software	5 Dec 202407:00	–	ics
NVD	CVE-2024-11609	30 Jan 202521:15	–	nvd
Positive Technologies	PT-2024-17135 · Automationdirect · Automationdirect C-More Ea9 Hmi	1 Jul 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-11609 AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability	30 Jan 202520:18	–	vulnrichment
Zero Day Initiative	AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability	11 Dec 202400:00	–	zdi

[
  {
    "vendor": "AutomationDirect",
    "product": "C-More EA9",
    "versions": [
      {
        "version": "6.78",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-24-1673/
certvde	www.certvde.com/en/bulletins/bulletins/2182-automationdirect-c-more-ea9-programming-software/

30 Jan 2025 20:18Current

CVSS 37.8

EPSS0.00297

CWE-121