Skip to content
OpenAdvisories

Product · Automation Direct

DirectLogic H2-DM1E

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-45368

    AutomationDirect DirectLogic H2-DM1E Session Fixation

    The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as …

    Automation Direct DirectLogic H2-DM1E
  • High 8.8
    CVE-2024-43099

    AutomationDirect DirectLogic H2-DM1E Authentication Bypass by Capture-replay

    The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions between a host PC and a PLC. During such sessions, a session key is utilized to maintain security. However, if an attacker captures this sessi…

    Automation Direct DirectLogic H2-DM1E