Description (CNA)
AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AutomationDirect / C-more EA9 HMI EA9-T6CL | affected 0 through v6.79 |
| AutomationDirect / C-more EA9 HMI EA9-T7CL-R | affected 0 through v6.79 |
| AutomationDirect / C-more EA9 HMI EA9-T7CL | affected 0 through v6.79 |
| AutomationDirect / C-more EA9 HMI EA9-T8CL | affected 0 through v6.79 |
| AutomationDirect / C-more EA9 HMI EA9-T10CL | affected 0 through v6.79 |
| AutomationDirect / C-more EA9 HMI EA9-T10WCL | affected 0 through v6.79 |
| AutomationDirect / C-more EA9 HMI EA9-T12CL | affected 0 through v6.79 |
| AutomationDirect / C-more EA9 HMI EA9-T15CL-R | affected 0 through v6.79 |
| AutomationDirect / C-more EA9 HMI EA9-T15CL | affected 0 through v6.79 |
| AutomationDirect / C-more EA9 HMI EA9-RHMI | affected 0 through v6.79 |
CWE
CWE-120
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-08
- https://community.automationdirect.com/s/cybersecurity/security-advisories
ADP enrichment
No English description supplied.
No references supplied.