Skip to content
OpenAdvisories
High ICSA-22-167-01 2 CVEs

AutomationDirect C-More EA9 HMI

Published Jun 16, 2022 · Updated Jun 16, 2022

Vendor: Automation Direct Product: C-more EA9 EA9-PGMSW Product: C-more EA9 EA9-RHMI Product: C-more EA9 EA9-T10CL Product: C-more EA9 EA9-T10WCL Product: C-more EA9 EA9-T12CL Product: C-more EA9 EA9-T15CL Product: C-more EA9 EA9-T15CL-R Product: C-more EA9 EA9-T6CL Product: C-more EA9 EA9-T6CL-R Product: C-more EA9 EA9-T7CL Product: C-more EA9 EA9-T7CL-R Product: C-more EA9 EA9-T8CL

Summary

Successful exploitation of these vulnerabilities could cause a loss of sensitive information and the ability to run code execution with elevated privileges.

Vulnerabilities 2

  • High 7.8
    CVE-2022-2006

    AutomationDirect C-more EA9 HMI Uncontrolled Search Path Element

    AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prio…

    Automation Direct C-More EA9
  • High 7.5
    CVE-2022-2005

    AutomationDirect C-more EA9 HMI Cleartext Transmission

    AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow an attacker to obtain the login credentials and login as a valid user. This issue affects: AutomationDirect C-more EA9 EA…

    Automation Direct C-More EA9

Revision history

  1. #1

    ICSA-22-167-01 AutomationDirect C-more EA9 HMI

References