Vulnerability Details CVE-2024-11611
AutomationDirect C-More EA9 EAP9 File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AutomationDirect C-More EA9. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of EAP9 files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24774.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.6%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2024-11611
-
cpe:2.3:h:automationdirect:c-more_ea9-rhmi:-
-
cpe:2.3:h:automationdirect:c-more_ea9-t10cl:-
-
cpe:2.3:h:automationdirect:c-more_ea9-t10wcl:-
-
cpe:2.3:h:automationdirect:c-more_ea9-t12cl:-
-
cpe:2.3:h:automationdirect:c-more_ea9-t15cl-r:-
-
cpe:2.3:h:automationdirect:c-more_ea9-t15cl:-
-
cpe:2.3:h:automationdirect:c-more_ea9-t6cl-r:-
-
cpe:2.3:h:automationdirect:c-more_ea9-t6cl:-
-
cpe:2.3:h:automationdirect:c-more_ea9-t8cl:-
-
cpe:2.3:o:automationdirect:c-more_ea9-rhmi_firmware:-
-
cpe:2.3:o:automationdirect:c-more_ea9-rhmi_firmware:6.77
-
cpe:2.3:o:automationdirect:c-more_ea9-rhmi_firmware:6.78
-
cpe:2.3:o:automationdirect:c-more_ea9-t10cl_firmware:-
-
cpe:2.3:o:automationdirect:c-more_ea9-t10cl_firmware:6.53
-
cpe:2.3:o:automationdirect:c-more_ea9-t10cl_firmware:6.77
-
cpe:2.3:o:automationdirect:c-more_ea9-t10cl_firmware:6.78
-
cpe:2.3:o:automationdirect:c-more_ea9-t10wcl_firmware:-
-
cpe:2.3:o:automationdirect:c-more_ea9-t10wcl_firmware:6.53
-
cpe:2.3:o:automationdirect:c-more_ea9-t10wcl_firmware:6.77
-
cpe:2.3:o:automationdirect:c-more_ea9-t10wcl_firmware:6.78
-
cpe:2.3:o:automationdirect:c-more_ea9-t12cl_firmware:-
-
cpe:2.3:o:automationdirect:c-more_ea9-t12cl_firmware:6.53
-
cpe:2.3:o:automationdirect:c-more_ea9-t12cl_firmware:6.77
-
cpe:2.3:o:automationdirect:c-more_ea9-t12cl_firmware:6.78
-
cpe:2.3:o:automationdirect:c-more_ea9-t15cl-r_firmware:-
-
cpe:2.3:o:automationdirect:c-more_ea9-t15cl-r_firmware:6.53
-
cpe:2.3:o:automationdirect:c-more_ea9-t15cl-r_firmware:6.77
-
cpe:2.3:o:automationdirect:c-more_ea9-t15cl-r_firmware:6.78
-
cpe:2.3:o:automationdirect:c-more_ea9-t15cl_firmware:-
-
cpe:2.3:o:automationdirect:c-more_ea9-t15cl_firmware:6.53
-
cpe:2.3:o:automationdirect:c-more_ea9-t15cl_firmware:6.77
-
cpe:2.3:o:automationdirect:c-more_ea9-t15cl_firmware:6.78
-
cpe:2.3:o:automationdirect:c-more_ea9-t6cl-r_firmware:-
-
cpe:2.3:o:automationdirect:c-more_ea9-t6cl-r_firmware:6.53
-
cpe:2.3:o:automationdirect:c-more_ea9-t6cl-r_firmware:6.77
-
cpe:2.3:o:automationdirect:c-more_ea9-t6cl-r_firmware:6.78
-
cpe:2.3:o:automationdirect:c-more_ea9-t6cl_firmware:-
-
cpe:2.3:o:automationdirect:c-more_ea9-t6cl_firmware:6.53
-
cpe:2.3:o:automationdirect:c-more_ea9-t6cl_firmware:6.77
-
cpe:2.3:o:automationdirect:c-more_ea9-t6cl_firmware:6.78
-
cpe:2.3:o:automationdirect:c-more_ea9-t8cl_firmware:-
-
cpe:2.3:o:automationdirect:c-more_ea9-t8cl_firmware:6.53
-
cpe:2.3:o:automationdirect:c-more_ea9-t8cl_firmware:6.77
-
cpe:2.3:o:automationdirect:c-more_ea9-t8cl_firmware:6.78