Known Vulnerabilities for products from AutomationDirect

Listed below are 17 of the newest known vulnerabilities associated with the vendor "AutomationDirect".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Additional devices specifications by AutomationDirect can be found at device.report : AutomationDirect

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2022-2485 json Any attempt (good or bad) to log into AutomationDirect Stride Field I/O with a web browser may result in the device respondin... 7.5 - HIGH 2022-08-31 2022-09-06
CVE-2022-2006 json AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code duri... 7.8 - HIGH 2022-08-31 2022-09-06
CVE-2022-2005 json AutomationDirect C-more EA9 HTTP webserver uses an insecure mechanism to transport credentials from client to web server, whi... 7.5 - HIGH 2022-08-31 2022-09-06
CVE-2022-2004 json AutomationDirect DirectLOGIC is vulnerable to a a specially crafted packet can be sent continuously to the PLC to prevent acc... 7.5 - HIGH 2022-08-31 2022-09-06
CVE-2022-2003 json AutomationDirect DirectLOGIC is vulnerable to a specifically crafted serial message to the CPU serial port that will cause th... 9.1 - CRITICAL 2022-08-31 2022-09-06
CVE-2021-32986 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 9.8 - CRITICAL 2022-04-04 2022-10-25
CVE-2021-32984 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 9.8 - CRITICAL 2022-04-04 2022-04-13
CVE-2021-32982 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 7.5 - HIGH 2022-04-04 2022-04-13
CVE-2021-32980 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 9.8 - CRITICAL 2022-04-04 2022-04-13
CVE-2021-32978 json ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... 7.5 - HIGH 2022-04-04 2022-04-13
CVE-2020-10922 json This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE HMI EA... 7.5 - HIGH 2020-07-23 2020-07-28
CVE-2020-10921 json This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware version 6.5... 9.8 - CRITICAL 2020-07-23 2020-08-10
CVE-2020-10920 json This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-MORE HMI EA9 Firmware ver... 9.8 - CRITICAL 2020-07-23 2020-07-28
CVE-2020-10919 json This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firm... 5.9 - MEDIUM 2020-07-23 2022-09-27
CVE-2020-10918 json This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware vers... 7.5 - HIGH 2020-07-23 2020-07-28
CVE-2020-6969 json It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an a... 9.8 - CRITICAL 2020-02-05 2020-02-14
CVE-2017-14020 json In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (P... Not Provided 2017-11-13 2025-04-20

Known software with vulnerabilities from AutomationDirect

Type Vendor Product Version
Operating
System		AutomationdirectC-more Hmi Ea96.52
Operating
System		AutomationdirectC-more Hmi Ea9 Firmware6.52
HardwareAutomationdirectEa9-pgmsw-
HardwareAutomationdirectEa9-rhmi-
HardwareAutomationdirectEa9-t10cl-
HardwareAutomationdirectEa9-t10wcl-
HardwareAutomationdirectEa9-t12cl-
HardwareAutomationdirectEa9-t15cl-
HardwareAutomationdirectEa9-t15cl-r-
HardwareAutomationdirectEa9-t6cl-
HardwareAutomationdirectEa9-t6cl-r-
HardwareAutomationdirectEa9-t7cl-
HardwareAutomationdirectEa9-t7cl-r-
HardwareAutomationdirectEa9-t8cl-
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report