Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-25136

Published: 26/03/2024 Updated: 27/03/2024

Vulnerability Summary

There is a function in AutomationDirect C-MORE EA9 HMI that allows an malicious user to send a relative path in the URL without proper sanitizing of the content.

ICS Advisories

https://ics-cert.us-cert.gov/advisories/12220b5caff726751662172d1d48a658
Critical Infrastructure Sectors: Commercial Facilities, Critical Manufacturing, Energy

References

CWE-22https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-086-01https://nvd.nist.govhttps://www.cisa.gov/news-events/ics-advisories/icsa-24-086-01
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4367CVE-2024-35977CVE-2023-49335man-in-the-middleCVE-2024-4947CVE-2024-31714memory leakSQLCVE-2024-35994
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook