Description
AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AutomationDirect | C-more EA9 HMI EA9-T6CL | ≤ v6.79 | — |
| AutomationDirect | C-more EA9 HMI EA9-T7CL-R | ≤ v6.79 | — |
| AutomationDirect | C-more EA9 HMI EA9-T7CL | ≤ v6.79 | — |
| AutomationDirect | C-more EA9 HMI EA9-T8CL | ≤ v6.79 | — |
| AutomationDirect | C-more EA9 HMI EA9-T10CL | ≤ v6.79 | — |
| AutomationDirect | C-more EA9 HMI EA9-T10WCL | ≤ v6.79 | — |
| AutomationDirect | C-more EA9 HMI EA9-T12CL | ≤ v6.79 | — |
| AutomationDirect | C-more EA9 HMI EA9-T15CL-R | ≤ v6.79 | — |
| AutomationDirect | C-more EA9 HMI EA9-T15CL | ≤ v6.79 | — |
| AutomationDirect | C-more EA9 HMI EA9-RHMI | ≤ v6.79 | — |
Advisories 1
- ICSA-25-035-08 AutomationDirect C-more EA9 HMI CISA ICS & IT advisories · Feb 4, 2025