Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-45368

AutomationDirect DirectLogic H2-DM1E Session Fixation

Description

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as valid authentication responses. This behavior deviates from standard security practices where a single, specific response or encoding pattern is expected for successful authentication.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AutomationDirect DirectLogic H2-DM1E

Default version status: unaffected

  • 0 to ≤ 2.8.0affected

References