Skip to content
Noroxi

AutomationDirect records

38 published records for vendor automationdirect.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 20
  3. 22
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

38 records
  • CVE-2020-10920
    40Plan

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch

    CriticalCVSS 9.8No exploitEPSS 4%

    automationdirect · c-more hmi ea9 firmwareJul 23, 2020

  • CVE-2020-10921
    40Plan

    This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen

    CriticalCVSS 9.8No exploitEPSS 2%

    automationdirect · c-more hmi ea9 firmwareJul 23, 2020

  • CVE-2020-6969
    40Plan

    It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely

    CriticalCVSS 9.8No exploitEPSS 2%

    automationdirect · c-more ea9-rhi firmwareFeb 5, 2020

  • CVE-2024-21785
    39Monitor

    A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9.

    CriticalCVSS 9.8No exploitEPSS 1%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2024-24963
    39Monitor

    A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-55

    CriticalCVSS 9.8No exploitEPSS 1%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2024-24962
    39Monitor

    A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-55

    CriticalCVSS 9.8No exploitEPSS 1%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2021-32984
    39Monitor

    Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

    CriticalCVSS 9.8No exploitEPSS 1%

    automationdirect · c0-10dd1e-d firmwareApr 4, 2022

  • CVE-2021-32980
    39Monitor

    Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

    CriticalCVSS 9.8No exploitEPSS 1%

    automationdirect · c0-10dd1e-d firmwareApr 4, 2022

  • CVE-2021-32986
    39Monitor

    Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel

    CriticalCVSS 9.8No exploitEPSS 1%

    automationdirect · c0-10dd1e-d firmwareApr 4, 2022

  • CVE-2024-23601
    39Monitor

    A code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9.

    CriticalCVSS 9.8No exploitEPSS 0%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2024-22187
    36Monitor

    A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P

    CriticalCVSS 9.1No exploitEPSS 1%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2022-2003
    36Monitor

    AutomationDirect DirectLOGIC with Serial Communication Cleartext Transmission

    CriticalCVSS 9.1No exploitEPSS 0%

    automationdirect · d0-06dd1 firmwareAug 31, 2022

  • CVE-2024-45368
    34Monitor

    AutomationDirect DirectLogic H2-DM1E Session Fixation

    HighCVSS 8.7No exploitEPSS 0%

    automationdirect · directlogic h2-dm1eSep 13, 2024

  • CVE-2024-43099
    34Monitor

    AutomationDirect DirectLogic H2-DM1E Authentication Bypass by Capture-replay

    HighCVSS 8.7No exploitEPSS 0%

    automationdirect · directlogic h2-dm1eSep 13, 2024

  • CVE-2024-24947
    32Monitor

    A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1

    HighCVSS 8.2No exploitEPSS 0%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2024-24946
    32Monitor

    A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1

    HighCVSS 8.2No exploitEPSS 0%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2024-24958
    32Monitor

    Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3

    HighCVSS 8.2No exploitEPSS 0%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2024-24959
    32Monitor

    Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3

    HighCVSS 8.2No exploitEPSS 0%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2024-24956
    32Monitor

    Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3

    HighCVSS 8.2No exploitEPSS 0%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2024-24954
    32Monitor

    Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3

    HighCVSS 8.2No exploitEPSS 0%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2024-24955
    32Monitor

    Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3

    HighCVSS 8.2No exploitEPSS 0%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2024-24957
    32Monitor

    Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3

    HighCVSS 8.2No exploitEPSS 0%

    automationdirect · p3-550e firmwareMay 28, 2024

  • CVE-2020-10922
    31Monitor

    This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE HMI EA9 Firmware vers

    HighCVSS 7.5No exploitEPSS 3%

    automationdirect · c-more hmi ea9 firmwareJul 23, 2020

  • CVE-2020-10918
    31Monitor

    This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch

    HighCVSS 7.5No exploitEPSS 2%

    automationdirect · c-more hmi ea9 firmwareJul 23, 2020

  • CVE-2017-14020
    31Monitor

    In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-

    HighCVSS 7.8No exploitEPSS 1%

    automationdirect · click plc firmwareNov 13, 2017