Most recent entries from all

bdu:2024-02824

EUVD-2026-9232

fkie_cve-2024-25138

In AutomationDirect C-MORE EA9 HMI,

credentials used by the platform are stored as plain text on the device.

GHSA-hwq9-6hwc-8v7g

In AutomationDirect C-MORE EA9 HMI,

credentials used by the platform are stored as plain text on the device.

gsd-2024-25138

ICSA-24-086-01 — AutomationDirect C-MORE EA9 HMI

There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without properly sanitizing the content. In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which leads to a stack overflow. The result of this stack-based buffer overflow will lead to a denial-of-service condition. In AutomationDirect C-MORE EA9 HMI credentials used by the platform are stored as plain text on the device.