Approved changes feed: RSS · Atom

cpe:2.3:a:automationdirect:c-more_ea9_hmi_ea9-pgmsw:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAutomationdirect (5dd60aaf-eea3-5732-9a9c-5b671c0ed914)
ProductC More Ea9 Hmi Ea9 Pgmsw (efefe2dc-a919-5a40-a019-11e51993c5f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-25138 vulnerable 2026-06-08 06:31:22.253071 AutomationDirect C-MORE EA9 HMI Plaintext Storage of a Password
MEDIUM (6.5)
In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device.
Published: 2024-03-26T23:01:40.197Z
Updated: 2024-08-02T18:55:41.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25137 vulnerable 2026-06-08 06:31:22.251895 AutomationDirect C-MORE EA9 HMI Stack-based Buffer Overflow
MEDIUM (4.3)
In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may lead to a stack overflow. The result of this stack-based buffer overflow can lead to denial-of-service conditions.
Published: 2024-03-26T22:58:44.753Z
Updated: 2024-08-01T23:36:21.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25136 vulnerable 2026-06-08 06:31:22.250640 AutomationDirect C-MORE EA9 HMI Path Traversal
HIGH (7.5)
There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content.
Published: 2024-03-26T22:53:41.589Z
Updated: 2024-08-08T14:49:09.314Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.