Home

Description

In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device.

PUBLISHED Reserved 2024-02-05 | Published 2024-03-26 | Updated 2024-08-02 | Assigner icscert




MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-256

Product status

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Credits

Tomer Goldschmidt of Claroty Research - Team82 reported these vulnerabilities to CISA. finder

References

https/....cisa.gov/news-events/ics-advisories/icsa-24-086-01 government-resource

https/....cisa.gov/news-events/ics-advisories/icsa-24-086-01 government-resource

cve.org (CVE-2024-25138)

nvd.nist.gov (CVE-2024-25138)

Download JSON