Approved changes feed: RSS · Atom

cpe:2.3:a:automationdirect:c-more_ea9_hmi_ea9-t10cl:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAutomationdirect (5dd60aaf-eea3-5732-9a9c-5b671c0ed914)
ProductC More Ea9 Hmi Ea9 T10Cl (05e7c542-6cca-533e-8cec-ea269eb8f962)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0960 vulnerable 2026-06-08 07:02:26.050468 AutomationDirect C-more EA9 HMI Classic Buffer Overflow
CRITICAL (9.8)
AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device.
Published: 2025-02-04T19:34:25.961Z
Updated: 2025-02-04T19:50:52.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25138 vulnerable 2026-06-08 06:31:22.252743 AutomationDirect C-MORE EA9 HMI Plaintext Storage of a Password
MEDIUM (6.5)
In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device.
Published: 2024-03-26T23:01:40.197Z
Updated: 2024-08-02T18:55:41.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25137 vulnerable 2026-06-08 06:31:22.251678 AutomationDirect C-MORE EA9 HMI Stack-based Buffer Overflow
MEDIUM (4.3)
In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may lead to a stack overflow. The result of this stack-based buffer overflow can lead to denial-of-service conditions.
Published: 2024-03-26T22:58:44.753Z
Updated: 2024-08-01T23:36:21.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25136 vulnerable 2026-06-08 06:31:22.244131 AutomationDirect C-MORE EA9 HMI Path Traversal
HIGH (7.5)
There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content.
Published: 2024-03-26T22:53:41.589Z
Updated: 2024-08-08T14:49:09.314Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.