C-more Ea9-t6cl Firmware vulnerabilities

6 known vulnerabilities in C-more Ea9-t6cl Firmware from AutomationDirect. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  C-More EA9: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2024-11611Jan 30, 2025AutomationDirect

  AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to

• 7.8 High severity

  C-More EA9: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2024-11610Jan 30, 2025AutomationDirect

  AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to

• 7.8 High severity

  C-More EA9: Stack-based Buffer Overflow

  CVE-2024-11609Jan 30, 2025AutomationDirect

  AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is re

• 7.5 High severity

  C-MORE EA9 HMI EA9-T6CL: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-25136Mar 26, 2024AutomationDirect

  There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content.

• 7.8 High severity

  C-more EA9: Uncontrolled Search Path Element

  CVE-2022-2006Aug 31, 2022AutomationDirect

  AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior

• 7.5 High severity

  C-more EA9: Cleartext Transmission of Sensitive Information

  CVE-2022-2005Aug 31, 2022AutomationDirect

  AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, which may allow an attacker to obtain the login credentials and login as a valid user. This issue affects: AutomationDirect C-more EA9 EA9