CVE-2024-25138

Description

In AutomationDirect C-MORE EA9 HMI, credentials used by the platform are stored as plain text on the device.

Reserved 2024-02-05 | Published 2024-03-26 | Updated 2024-08-02 | Assigner icscert

Problem types

CWE-256

Product status

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Credits

Tomer Goldschmidt of Claroty Research - Team82 reported these vulnerabilities to CISA. finder

References

https/....cisa.gov/news-events/ics-advisories/icsa-24-086-01 government-resource

cve.org (CVE-2024-25138)

nvd.nist.gov (CVE-2024-25138)

Download JSON