Most recent entries from all

bdu:2024-02320

EUVD-2026-157818

fkie_cve-2024-25136

There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content.

GHSA-rv26-9qp5-5mh3

There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content.

gsd-2024-25136

ICSA-24-086-01 — AutomationDirect C-MORE EA9 HMI

There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without properly sanitizing the content. In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which leads to a stack overflow. The result of this stack-based buffer overflow will lead to a denial-of-service condition. In AutomationDirect C-MORE EA9 HMI credentials used by the platform are stored as plain text on the device.