h2-dm1e_firmware vulnerabilities

2 known vulnerabilities in h2-dm1e_firmware from AutomationDirect. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  DirectLogic H2-DM1E: Session Fixation

  CVE-2024-45368Sep 13, 2024AutomationDirect

  The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as v

• 8.8 High severity

  DirectLogic H2-DM1E: Authentication Bypass by Capture-replay

  CVE-2024-43099Sep 13, 2024AutomationDirect

  The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions between a host PC and a PLC. During such sessions, a session key is utilized to maintain security. However, if an attacker captures this sessio