C-more EA9 HMI EA9-T6CL vulnerabilities

2 known vulnerabilities in C-more EA9 HMI EA9-T6CL from AutomationDirect. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  C-more EA9 HMI EA9-T6CL: Buffer Copy without Checking Size of Input

  CVE-2025-0960Feb 4, 2025AutomationDirect

  AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device.

• 7.5 High severity

  C-MORE EA9 HMI EA9-T6CL: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-25136Mar 26, 2024AutomationDirect

  There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content.