Lucene search
+L

162 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/30 12:00 a.m.•8 views

CVE-2024-11611: Improper Restriction of Operations within the Bounds of a Memory Buffer

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that th...

7.8CVSS6.9AI score0.00278EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/30 12:00 a.m.•5 views

CVE-2024-11610: Improper Restriction of Operations within the Bounds of a Memory Buffer

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that th...

7.8CVSS6.9AI score0.00278EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/30 12:00 a.m.•20 views

AutomationDirect C-More EA9 Programming Software 缓冲区错误漏洞

AutomationDirect C-More EA9 Programming Software is a programming software from AutomationDirect, Inc. AutomationDirect C-More EA9 Programming Software suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data when parsing an EAP9 file, resulting ...

7.8CVSS8.1AI score0.00278EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
•added 2024/12/11 12:00 a.m.•25 views

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7AI score0.00278EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/11 12:00 a.m.•21 views

AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS6.8AI score0.00307EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/12/11 12:00 a.m.•20 views

AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7AI score0.00278EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/30 12:00 a.m.•18 views

PT-2024-17137 · Automationdirect · C-More Ea9 Eap9

Name of the Vulnerable Software and Affected Versions: AutomationDirect C-More EA9 EAP9 affected versions not specified Description: The issue is a remote code execution vulnerability due to memory corruption in the analysis of AutomationDirect C-More EA9 EAP9 files. This allows remote attackers ...

7.8CVSS7.7AI score0.00278EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/07/01 12:00 a.m.•18 views

PT-2024-17135 · Automationdirect · Automationdirect C-More Ea9 Hmi

Name of the Vulnerable Software and Affected Versions: AutomationDirect C-More EA9 affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this issue...

7.8CVSS7.2AI score0.00307EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2024/07/01 12:00 a.m.•8 views

PT-2024-9893

Name of the Vulnerable Software and Affected Versions: AutomationDirect C-More EA9 versions affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit...

7.8CVSS6.7AI score0.00278EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
•added 2024/04/10 12:00 a.m.•22 views

The vulnerability of the AutomationDirect C-MORE EA9 HMI software’s microprogramming system, related to unencrypted storage of critical information, allows a intruder to gain unauthorized access to protected data.

The vulnerability of the Microprogrammed Control Panel Software of AutomationDirect C-MORE EA9 HMI relates to the unencrypted storage of critical information. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

6.8CVSS5.5AI score0.00399EPSS
SaveExploits0References4Affected Software11
BDU FSTEC
BDU FSTEC
•added 2024/04/02 12:00 a.m.•21 views

The vulnerability of the Microprogrammed Control Panel Software of AutomationDirect C-MORE EA9 HMI, related to the operation of writing data beyond the buffer in memory, allows a intruder to trigger a malfunction during maintenance operations.

The vulnerability of the Microprogrammed Control Panel Software of AutomationDirect C-MORE EA9 HMI relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause malfunctions during...

4.3CVSS6.4AI score0.0045EPSS
SaveExploits0References4Affected Software11
BDU FSTEC
BDU FSTEC
•added 2024/03/27 12:00 a.m.•20 views

The vulnerability of the AutomationDirect C-MORE EA9 HMI software-related to incorrect restrictions on path names in the restricted access catalog allows a intruder to trigger a service failure.

The vulnerability of the Microprogrammed Control Panel Software of AutomationDirect C-MORE EA9 HMI is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker to trigger a service failure...

7.8CVSS5.5AI score0.00618EPSS
SaveExploits0References6Affected Software11
NVD
NVD
•added 2024/03/26 11:15 p.m.•24 views

CVE-2024-25137

In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may lead to a stack overflow. The result of this stack-based buffer overflow can lead to denial-of-service conditions...

4.3CVSS5.4AI score0.0045EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/26 11:01 p.m.•13 views

CVE-2024-25138 AutomationDirect C-MORE EA9 HMI Plaintext Storage of a Password

In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device...

6.5CVSS6.7AI score0.00399EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/26 11:01 p.m.•82 views

CVE-2024-25138

The CVE-2024-25138 entry affects AutomationDirect C-MORE EA9 HMI, where credentials are stored in plaintext on the device. The vulnerability stems from plaintext storage of passwords in the EA9 HMI platform, enabling exposure of authentication data. CISA/ICS advisory notes potential remote exploi...

6.5CVSS6.7AI score0.00399EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/26 11:01 p.m.•34 views

CVE-2024-25138 AutomationDirect C-MORE EA9 HMI Plaintext Storage of a Password

In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device...

6.5CVSS6.7AI score0.00399EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/26 10:58 p.m.•36 views

CVE-2024-25137 AutomationDirect C-MORE EA9 HMI Stack-based Buffer Overflow

In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may lead to a stack overflow. The result of this stack-based buffer overflow can lead to denial-of-service conditions...

4.3CVSS5.3AI score0.0045EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/26 10:58 p.m.•21 views

CVE-2024-25137 AutomationDirect C-MORE EA9 HMI Stack-based Buffer Overflow

In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may lead to a stack overflow. The result of this stack-based buffer overflow can lead to denial-of-service conditions...

4.3CVSS7.4AI score0.0045EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/26 10:53 p.m.•46 views

CVE-2024-25136 AutomationDirect C-MORE EA9 HMI Path Traversal

There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content...

7.5CVSS7.6AI score0.00618EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/26 10:53 p.m.•15 views

CVE-2024-25136 AutomationDirect C-MORE EA9 HMI Path Traversal

There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content...

7.5CVSS6.8AI score0.00618EPSS
SaveExploits0References1
Rows per page
Query Builder