Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-25136

AutomationDirect C-MORE EA9 HMI Path Traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AutomationDirect C-MORE EA9 HMI EA9-T6CL

Default version status: unaffected

  • 0 to ≤ 6.77affected

AutomationDirect C-MORE EA9 HMI EA9-T7CL

Default version status: unaffected

  • 0 to ≤ 6.77affected

AutomationDirect C-MORE EA9 HMI EA0-T7CL-R

Default version status: unaffected

  • 0 to ≤ 6.77affected

AutomationDirect C-MORE EA9 HMI EA9-T8CL

Default version status: unaffected

  • 0 to ≤ 6.77affected

AutomationDirect C-MORE EA9 HMI EA9-T10CL

Default version status: unaffected

  • 0 to ≤ 6.77affected

AutomationDirect C-MORE EA9 HMI EA9-T10WCL

Default version status: unaffected

  • 0 to ≤ 6.77affected

AutomationDirect C-MORE EA9 HMI EA9-T12CL

Default version status: unaffected

  • 0 to ≤ 6.77affected

AutomationDirect C-MORE EA9 HMI EA9-T15CL

Default version status: unaffected

  • 0 to ≤ 6.77affected

AutomationDirect C-MORE EA9 HMI EA9-T15CL-R

Default version status: unaffected

  • 0 to ≤ 6.77affected

AutomationDirect C-MORE EA9 HMI EA9-RHMI

Default version status: unaffected

  • 0 to ≤ 6.77affected

AutomationDirect C-MORE EA9 HMI EA9-PGMSW

Default version status: unaffected

  • 0 to ≤ 6.77affected

References