Vulnerabilidades em AutomationDirect

56 resultados
Análise Vexday

Com 50 CVEs catalogadas, o portfólio de vulnerabilidades da AutomationDirect apresenta perfil de risco moderado, sem registros de exploração ativa no catálogo CISA KEV — índice abaixo da média geral do catálogo. Nove vulnerabilidades são classificadas como críticas e merecem atenção prioritária em ambientes de tecnologia operacional, onde a tolerância a falhas tende a ser baixa. A ausência de PoCs públicas e de novas CVEs nos últimos 90 dias reduz a pressão imediata de remediação, mas o tipo de falha mais recorrente — CWE-787 (escrita fora dos limites de memória) — é historicamente associado a condições de execução de código e corrupção de memória, o que eleva o potencial de impacto caso explorações venham a surgir. A CVE mais perigosa ativa no momento, CVE-2016-9335, registra EPSS de 0,0156, indicando probabilidade de exploração ainda baixa, embora sua antiguidade sugira que atualizações corretivas deveriam ter sido aplicadas há bastante tempo.

CVE-2024-24954HIGHSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3EPSS 0.5%CVE-2024-24959HIGHSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3EPSS 0.5%CVE-2024-24956HIGHSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3EPSS 0.5%CVE-2024-24958HIGHSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3EPSS 0.5%CVE-2022-2005HIGHAutomationDirect C-more EA9 HMI Cleartext TransmissionEPSS 0.5%CVE-2022-2485CRITICALAutomationDirect Stride Field I/O Cleartext Transmission of Sensitive InformationEPSS 0.5%CVE-2025-62498HIGHAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.5%CVE-2024-24955HIGHSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3EPSS 0.5%CVE-2024-24957HIGHSeveral out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3EPSS 0.5%CVE-2025-59776MEDIUMAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.5%CVE-2025-60023MEDIUMAutomationDirect Productivity Suite Relative Path TraversalEPSS 0.5%CVE-2024-25137MEDIUMAutomationDirect C-MORE EA9 HMI Stack-based Buffer OverflowEPSS 0.4%CVE-2024-25138MEDIUMAutomationDirect C-MORE EA9 HMI Plaintext Storage of a PasswordEPSS 0.4%CVE-2022-2006HIGHAutomationDirect C-more EA9 HMI Uncontrolled Search Path ElementEPSS 0.4%CVE-2025-58473HIGHAutomationDirect CLICK PLUS Improper Resource Shutdown or ReleaseEPSS 0.4%CVE-2024-45368HIGHAutomationDirect DirectLogic H2-DM1E Session FixationEPSS 0.3%CVE-2025-57882HIGHAutomationDirect CLICK PLUS Improper Resource Shutdown or ReleaseEPSS 0.3%CVE-2025-55069HIGHAutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number GeneratorEPSS 0.3%CVE-2024-11609HIGHAutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.3%CVE-2024-43099HIGHAutomationDirect DirectLogic H2-DM1E Authentication Bypass by Capture-replayEPSS 0.3%