Automationdirect C-More Ea9 Hmi Ea9-T12cl
4 CVEs affecting Automationdirect C-More Ea9 Hmi Ea9-T12cl. Latest disclosed: 2025-02-04. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-0960 | Critical | 9.8 | 2025-02-04 | AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a d… |
CVE-2024-25136 | High | 7.5 | 2024-03-26 | There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content. |
CVE-2024-25138 | Medium | 6.5 | 2024-03-26 | In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device. |
CVE-2024-25137 | Medium | 4.3 | 2024-03-26 | In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may… |