CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-11609

AutomationDirect C-More EA9 EAP9 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of EAP9 files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24772.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 17.7%

CVSS Severity

CVSS v3 Score 7.8

References

Products affected by CVE-2024-11609

Automationdirect » C-More Ea9-Rhmi » Version: N/A

cpe:2.3:h:automationdirect:c-more_ea9-rhmi:-
Automationdirect » C-More Ea9-T10cl » Version: N/A

cpe:2.3:h:automationdirect:c-more_ea9-t10cl:-
Automationdirect » C-More Ea9-T10wcl » Version: N/A

cpe:2.3:h:automationdirect:c-more_ea9-t10wcl:-
Automationdirect » C-More Ea9-T12cl » Version: N/A

cpe:2.3:h:automationdirect:c-more_ea9-t12cl:-
Automationdirect » C-More Ea9-T15cl-R » Version: N/A

cpe:2.3:h:automationdirect:c-more_ea9-t15cl-r:-
Automationdirect » C-More Ea9-T15cl » Version: N/A

cpe:2.3:h:automationdirect:c-more_ea9-t15cl:-
Automationdirect » C-More Ea9-T6cl-R » Version: N/A

cpe:2.3:h:automationdirect:c-more_ea9-t6cl-r:-
Automationdirect » C-More Ea9-T6cl » Version: N/A

cpe:2.3:h:automationdirect:c-more_ea9-t6cl:-
Automationdirect » C-More Ea9-T8cl » Version: N/A

cpe:2.3:h:automationdirect:c-more_ea9-t8cl:-
Automationdirect » C-More Ea9-Rhmi Firmware » Version: N/A

cpe:2.3:o:automationdirect:c-more_ea9-rhmi_firmware:-
Automationdirect » C-More Ea9-Rhmi Firmware » Version: 6.77

cpe:2.3:o:automationdirect:c-more_ea9-rhmi_firmware:6.77
Automationdirect » C-More Ea9-Rhmi Firmware » Version: 6.78

cpe:2.3:o:automationdirect:c-more_ea9-rhmi_firmware:6.78
Automationdirect » C-More Ea9-T10cl Firmware » Version: N/A

cpe:2.3:o:automationdirect:c-more_ea9-t10cl_firmware:-
Automationdirect » C-More Ea9-T10cl Firmware » Version: 6.53

cpe:2.3:o:automationdirect:c-more_ea9-t10cl_firmware:6.53
Automationdirect » C-More Ea9-T10cl Firmware » Version: 6.77

cpe:2.3:o:automationdirect:c-more_ea9-t10cl_firmware:6.77
Automationdirect » C-More Ea9-T10cl Firmware » Version: 6.78

cpe:2.3:o:automationdirect:c-more_ea9-t10cl_firmware:6.78
Automationdirect » C-More Ea9-T10wcl Firmware » Version: N/A

cpe:2.3:o:automationdirect:c-more_ea9-t10wcl_firmware:-
Automationdirect » C-More Ea9-T10wcl Firmware » Version: 6.53

cpe:2.3:o:automationdirect:c-more_ea9-t10wcl_firmware:6.53
Automationdirect » C-More Ea9-T10wcl Firmware » Version: 6.77

cpe:2.3:o:automationdirect:c-more_ea9-t10wcl_firmware:6.77
Automationdirect » C-More Ea9-T10wcl Firmware » Version: 6.78

cpe:2.3:o:automationdirect:c-more_ea9-t10wcl_firmware:6.78
Automationdirect » C-More Ea9-T12cl Firmware » Version: N/A

cpe:2.3:o:automationdirect:c-more_ea9-t12cl_firmware:-
Automationdirect » C-More Ea9-T12cl Firmware » Version: 6.53

cpe:2.3:o:automationdirect:c-more_ea9-t12cl_firmware:6.53
Automationdirect » C-More Ea9-T12cl Firmware » Version: 6.77

cpe:2.3:o:automationdirect:c-more_ea9-t12cl_firmware:6.77
Automationdirect » C-More Ea9-T12cl Firmware » Version: 6.78

cpe:2.3:o:automationdirect:c-more_ea9-t12cl_firmware:6.78
Automationdirect » C-More Ea9-T15cl-R Firmware » Version: N/A

cpe:2.3:o:automationdirect:c-more_ea9-t15cl-r_firmware:-
Automationdirect » C-More Ea9-T15cl-R Firmware » Version: 6.53

cpe:2.3:o:automationdirect:c-more_ea9-t15cl-r_firmware:6.53
Automationdirect » C-More Ea9-T15cl-R Firmware » Version: 6.77

cpe:2.3:o:automationdirect:c-more_ea9-t15cl-r_firmware:6.77
Automationdirect » C-More Ea9-T15cl-R Firmware » Version: 6.78

cpe:2.3:o:automationdirect:c-more_ea9-t15cl-r_firmware:6.78
Automationdirect » C-More Ea9-T15cl Firmware » Version: N/A

cpe:2.3:o:automationdirect:c-more_ea9-t15cl_firmware:-
Automationdirect » C-More Ea9-T15cl Firmware » Version: 6.53

cpe:2.3:o:automationdirect:c-more_ea9-t15cl_firmware:6.53
Automationdirect » C-More Ea9-T15cl Firmware » Version: 6.77

cpe:2.3:o:automationdirect:c-more_ea9-t15cl_firmware:6.77
Automationdirect » C-More Ea9-T15cl Firmware » Version: 6.78

cpe:2.3:o:automationdirect:c-more_ea9-t15cl_firmware:6.78
Automationdirect » C-More Ea9-T6cl-R Firmware » Version: N/A

cpe:2.3:o:automationdirect:c-more_ea9-t6cl-r_firmware:-
Automationdirect » C-More Ea9-T6cl-R Firmware » Version: 6.53

cpe:2.3:o:automationdirect:c-more_ea9-t6cl-r_firmware:6.53
Automationdirect » C-More Ea9-T6cl-R Firmware » Version: 6.77

cpe:2.3:o:automationdirect:c-more_ea9-t6cl-r_firmware:6.77
Automationdirect » C-More Ea9-T6cl-R Firmware » Version: 6.78

cpe:2.3:o:automationdirect:c-more_ea9-t6cl-r_firmware:6.78
Automationdirect » C-More Ea9-T6cl Firmware » Version: N/A

cpe:2.3:o:automationdirect:c-more_ea9-t6cl_firmware:-
Automationdirect » C-More Ea9-T6cl Firmware » Version: 6.53

cpe:2.3:o:automationdirect:c-more_ea9-t6cl_firmware:6.53
Automationdirect » C-More Ea9-T6cl Firmware » Version: 6.77

cpe:2.3:o:automationdirect:c-more_ea9-t6cl_firmware:6.77
Automationdirect » C-More Ea9-T6cl Firmware » Version: 6.78

cpe:2.3:o:automationdirect:c-more_ea9-t6cl_firmware:6.78
Automationdirect » C-More Ea9-T8cl Firmware » Version: N/A

cpe:2.3:o:automationdirect:c-more_ea9-t8cl_firmware:-
Automationdirect » C-More Ea9-T8cl Firmware » Version: 6.53

cpe:2.3:o:automationdirect:c-more_ea9-t8cl_firmware:6.53
Automationdirect » C-More Ea9-T8cl Firmware » Version: 6.77

cpe:2.3:o:automationdirect:c-more_ea9-t8cl_firmware:6.77
Automationdirect » C-More Ea9-T8cl Firmware » Version: 6.78

cpe:2.3:o:automationdirect:c-more_ea9-t8cl_firmware:6.78

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-11609

Products

Pricing

Contact Us