There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without proper sanitizing of the content.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
C-MORE EA9 HMI EA9-T6CL
Vendor
AutomationDirect
Product
C-MORE EA9 HMI EA9-T6CL
Platforms
Unknown
Default status
unaffected
C-MORE EA9 HMI EA9-T6CL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
6.77
None listed
C-MORE EA9 HMI EA9-T7CL
Vendor
AutomationDirect
Product
C-MORE EA9 HMI EA9-T7CL
Platforms
Unknown
Default status
unaffected
C-MORE EA9 HMI EA9-T7CL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
6.77
None listed
C-MORE EA9 HMI EA0-T7CL-R
Vendor
AutomationDirect
Product
C-MORE EA9 HMI EA0-T7CL-R
Platforms
Unknown
Default status
unaffected
C-MORE EA9 HMI EA0-T7CL-R · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
6.77
None listed
C-MORE EA9 HMI EA9-T8CL
Vendor
AutomationDirect
Product
C-MORE EA9 HMI EA9-T8CL
Platforms
Unknown
Default status
unaffected
C-MORE EA9 HMI EA9-T8CL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
6.77
None listed
C-MORE EA9 HMI EA9-T10CL
Vendor
AutomationDirect
Product
C-MORE EA9 HMI EA9-T10CL
Platforms
Unknown
Default status
unaffected
C-MORE EA9 HMI EA9-T10CL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
6.77
None listed
C-MORE EA9 HMI EA9-T10WCL
Vendor
AutomationDirect
Product
C-MORE EA9 HMI EA9-T10WCL
Platforms
Unknown
Default status
unaffected
C-MORE EA9 HMI EA9-T10WCL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
6.77
None listed
C-MORE EA9 HMI EA9-T12CL
Vendor
AutomationDirect
Product
C-MORE EA9 HMI EA9-T12CL
Platforms
Unknown
Default status
unaffected
C-MORE EA9 HMI EA9-T12CL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
6.77
None listed
C-MORE EA9 HMI EA9-T15CL
Vendor
AutomationDirect
Product
C-MORE EA9 HMI EA9-T15CL
Platforms
Unknown
Default status
unaffected
C-MORE EA9 HMI EA9-T15CL · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
6.77
None listed
C-MORE EA9 HMI EA9-T15CL-R
Vendor
AutomationDirect
Product
C-MORE EA9 HMI EA9-T15CL-R
Platforms
Unknown
Default status
unaffected
C-MORE EA9 HMI EA9-T15CL-R · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
6.77
None listed
C-MORE EA9 HMI EA9-RHMI
Vendor
AutomationDirect
Product
C-MORE EA9 HMI EA9-RHMI
Platforms
Unknown
Default status
unaffected
C-MORE EA9 HMI EA9-RHMI · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
c
Unavailable
6.77
None listed
C-MORE EA9 HMI EA9-PGMSW
Vendor
AutomationDirect
Product
C-MORE EA9 HMI EA9-PGMSW
Platforms
Unknown
Default status
unaffected
C-MORE EA9 HMI EA9-PGMSW · Scoped product and version facts