Skip to content
OpenAdvisories

Vendor

Automation Direct

61 known vulnerabilities.

Products

P3-550E 15 Productivity Suite 15 Productivity 3000 P3-622 CPU 9 Productivity 3000 P3-550E CPU 9 Productivity 3000 P3-530 CPU 9 Productivity 2000 P2-622 CPU 9 Productivity 2000 P2-550 CPU 9 Productivity 1000 P1-550 CPU 9 Productivity 1000 P1-540 CPU 9 CLICK PLUS C0-0x CPU firmware 7 CLICK PLUS C0-1x CPU firmware 7 CLICK PLUS C2-x CPU firmware 7 CLICK PLC CPU Modules: C0-1x CPUs 5 C-More EA9 5 C-more EA9 HMI EA9-T6CL 4 C-more EA9 HMI EA9-T7CL 4 C-more EA9 HMI EA9-T8CL 4 C-more EA9 HMI EA9-T10CL 4 C-more EA9 HMI EA9-T10WCL 4 C-more EA9 HMI EA9-T12CL 4 C-more EA9 HMI EA9-T15CL-R 4 C-more EA9 HMI EA9-T15CL 4 C-more EA9 HMI EA9-RHMI 4 C-MORE EA9 HMI EA0-T7CL-R 3 C-MORE EA9 HMI EA9-PGMSW 3 DirectLogic H2-DM1E 2 CLICK Programmable Logic Controller 2 DirectLOGIC D0-06 series CPUs 2 MB-Gateway 1 STRIDE-Managed Ethernet Switch models 1 SIO-MB04RTDS 1 SIO- MB04ADS 1 SIO-MB04THMS 1 SIO-MB08ADS-1 1 SIO-MB08ADS-2 1 SIO-MB08THMS 1 SIO-MB04DAS 1 SIO-MB12CDR 1 SIO-MB16CDD2 1 SIO-MB16ND3 1
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 10.0
    CVE-2025-61934

    AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327

    A binding to an unrestricted IP address vulnerability was discovered in Productivity Suite software version v4.4.1.19. The vulnerability allows an unauthenticated remote attacker to interact with the ProductivityService PLC simulator and read, write, or delet…

    Automation Direct Productivity Suite Productivity 1000 P1-550 CPU Productivity 3000 P3-622 CPU
  • Critical 10.0
    CVE-2025-36535

    AutomationDirect MB-Gateway Missing Authentication for Critical Function

    The embedded web server lacks authentication and access controls, allowing unrestricted remote access. This could lead to configuration changes, operational disruption, or arbitrary code execution depending on the environment and exposed functionality.

    Automation Direct MB-Gateway
  • Critical 9.8
    CVE-2025-0960

    AutomationDirect C-more EA9 HMI Classic Buffer Overflow

    AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device.

    Automation Direct C-more EA9 HMI EA9-T7CL C-more EA9 HMI EA9-T10CL C-more EA9 HMI EA9-T12CL
  • Critical 9.8
    CVE-2024-24963

    A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of A…

    Automation Direct P3-550E
  • Critical 9.8
    CVE-2024-24962

    A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of A…

    Automation Direct P3-550E
  • Critical 9.1
    CVE-2024-22187

    A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality …

    Automation Direct P3-550E
  • Critical 9.8
    CVE-2024-21785

    A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E…

    Automation Direct P3-550E
  • Critical 9.8
    CVE-2024-23601

    A code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9. A special…

    Automation Direct P3-550E
  • Critical 9.6
    CVE-2022-2485

    AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information

    Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device responding with its password in the communication packets.

    Automation Direct SIO-MB12CDR SIO-MB04RTDS SIO-MB16ND3
  • Critical 9.8
    CVE-2021-32986

    Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

    After Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, the unlocked state does not timeout. If the programming software is interrupted, the PLC remains unlocked. All subsequent programming con…

    Automation Direct CLICK PLC CPU Modules: C0-1x CPUs
  • Critical 9.8
    CVE-2021-32984

    Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

    All programming connections receive the same unlocked privileges, which can result in a privilege escalation. During the time Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 is unlocked by an authorized user, an attacker can c…

    Automation Direct CLICK PLC CPU Modules: C0-1x CPUs
  • Critical 9.8
    CVE-2021-32980

    Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

    Automation Direct CLICK PLC CPU Modules: C0-1x CPUs with firmware prior to v3.00 does not protect against additional software programming connections. An attacker can connect to the PLC while an existing connection is already active.

    Automation Direct CLICK PLC CPU Modules: C0-1x CPUs