« Volver al listado

CVE-2024-25138

Estado: AplazadaMedia (6.5)—

In AutomationDirect C-MORE EA9 HMI,

credentials used by the platform are stored as plain text on the device.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Automationdirect — C-more EA9AI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-25138",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-25138",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-08-02T18:42:16.488185Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "ics-cert@hq.dhs.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "AutomationDirect",
          "product": "C-MORE EA9 HMI EA9-T6CL",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "6.77"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "AutomationDirect",
          "product": "C-MORE EA9 HMI EA9-T7CL",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "6.77"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "AutomationDirect",
          "product": "C-MORE EA9 HMI EA0-T7CL-R",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "6.77"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "AutomationDirect",
          "product": "C-MORE EA9 HMI EA9-T8CL",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "6.77"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "AutomationDirect",
          "product": "C-MORE EA9 HMI EA9-T10CL",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "6.77"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "AutomationDirect",
          "product": "C-MORE EA9 HMI EA9-T10WCL",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "6.77"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "AutomationDirect",
          "product": "C-MORE EA9 HMI EA9-T12CL",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "6.77"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "AutomationDirect",
          "product": "C-MORE EA9 HMI EA9-T15CL",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "6.77"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "AutomationDirect",
          "product": "C-MORE EA9 HMI EA9-T15CL-R",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "6.77"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "AutomationDirect",
          "product": "C-MORE EA9 HMI EA9-RHMI",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "c",
              "lessThanOrEqual": "6.77"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "AutomationDirect",
          "product": "C-MORE EA9 HMI EA9-PGMSW",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "versionType": "custom",
              "lessThanOrEqual": "6.77"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-03-26T23:15:47.073",
  "references": [
    {
      "url": "https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-086-01",
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://https://www.cisa.gov/news-events/ics-advisories/icsa-24-086-01",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "ics-cert@hq.dhs.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-256"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "\nIn AutomationDirect C-MORE EA9 HMI, \n\ncredentials used by the platform are stored as plain text on the device.\n\n"
    },
    {
      "lang": "es",
      "value": "En AutomationDirect C-MORE EA9 HMI, las credenciales utilizadas por la plataforma se almacenan como texto plano en el dispositivo."
    }
  ],
  "lastModified": "2026-06-17T07:15:34.740",
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}