CVE-2024-25137
AutomationDirect C-MORE EA9 HMI Stack-based Buffer Overflow
Severity Score
4.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track
*SSVC
Descriptions
In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which may lead to a stack overflow. The result of this stack-based buffer overflow can lead to denial-of-service conditions.
En AutomationDirect C-MORE EA9 HMI hay un programa que copia un búfer de un tamaño controlado por el usuario en un búfer de tamaño limitado en la pila, lo que puede provocar un desbordamiento de la pila. El resultado de este desbordamiento de búfer en la región stack de la memoria puede provocar condiciones de denegación de servicio.
*Credits:
Tomer Goldschmidt of Claroty Research - Team82 reported these vulnerabilities to CISA.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2024-02-05 CVE Reserved
- 2024-03-26 CVE Published
- 2024-08-01 CVE Updated
- 2024-12-28 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-121: Stack-based Buffer Overflow
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-086-01 | Government Resource |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| AutomationDirect Search vendor "AutomationDirect" | C-MORE EA9 HMI EA9-T6CL Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T6CL" | <= 6.77 Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T6CL" and version " <= 6.77" | en |
Affected
| ||||||
| AutomationDirect Search vendor "AutomationDirect" | C-MORE EA9 HMI EA9-T7CL Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T7CL" | <= 6.77 Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T7CL" and version " <= 6.77" | en |
Affected
| ||||||
| AutomationDirect Search vendor "AutomationDirect" | C-MORE EA9 HMI EA0-T7CL-R Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA0-T7CL-R" | <= 6.77 Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA0-T7CL-R" and version " <= 6.77" | en |
Affected
| ||||||
| AutomationDirect Search vendor "AutomationDirect" | C-MORE EA9 HMI EA9-T8CL Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T8CL" | <= 6.77 Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T8CL" and version " <= 6.77" | en |
Affected
| ||||||
| AutomationDirect Search vendor "AutomationDirect" | C-MORE EA9 HMI EA9-T10CL Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T10CL" | <= 6.77 Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T10CL" and version " <= 6.77" | en |
Affected
| ||||||
| AutomationDirect Search vendor "AutomationDirect" | C-MORE EA9 HMI EA9-T10WCL Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T10WCL" | <= 6.77 Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T10WCL" and version " <= 6.77" | en |
Affected
| ||||||
| AutomationDirect Search vendor "AutomationDirect" | C-MORE EA9 HMI EA9-T12CL Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T12CL" | <= 6.77 Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T12CL" and version " <= 6.77" | en |
Affected
| ||||||
| AutomationDirect Search vendor "AutomationDirect" | C-MORE EA9 HMI EA9-T15CL Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T15CL" | <= 6.77 Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T15CL" and version " <= 6.77" | en |
Affected
| ||||||
| AutomationDirect Search vendor "AutomationDirect" | C-MORE EA9 HMI EA9-T15CL-R Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T15CL-R" | <= 6.77 Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-T15CL-R" and version " <= 6.77" | en |
Affected
| ||||||
| AutomationDirect Search vendor "AutomationDirect" | C-MORE EA9 HMI EA9-RHMI Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-RHMI" | <= 6.77 Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-RHMI" and version " <= 6.77" | en |
Affected
| ||||||
| AutomationDirect Search vendor "AutomationDirect" | C-MORE EA9 HMI EA9-PGMSW Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-PGMSW" | <= 6.77 Search vendor "AutomationDirect" for product "C-MORE EA9 HMI EA9-PGMSW" and version " <= 6.77" | en |
Affected
| ||||||