CVE-2025-0960: falha crítica em AutomationDirect C-more EA9 HMI EA9-RHMI
AutomationDirect C-more EA9 HMI Classic Buffer Overflow
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.9%
AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
AutomationDirect · C-more EA9 HMI EA9-RHMIAutomationDirect · C-more EA9 HMI EA9-T10CLAutomationDirect · C-more EA9 HMI EA9-T10WCLAutomationDirect · C-more EA9 HMI EA9-T12CLAutomationDirect · C-more EA9 HMI EA9-T15CLAutomationDirect · C-more EA9 HMI EA9-T15CL-RAutomationDirect · C-more EA9 HMI EA9-T6CLAutomationDirect · C-more EA9 HMI EA9-T7CLAutomationDirect · C-more EA9 HMI EA9-T7CL-RAutomationDirect · C-more EA9 HMI EA9-T8CL