Denial-of-Service Risk in AutomationDirect C-more EA9 HMI
CVE-2025-0960
9.3CRITICAL
What is CVE-2025-0960?
The C-more EA9 HMI by AutomationDirect features a function that lacks sufficient bounds checks. This vulnerability can be exploited by an attacker to either induce a denial-of-service condition or achieve remote code execution on the affected HMI devices. The implications of such exploits can significantly impact operational integrity and security, making immediate awareness and remediation critical.
Affected Version(s)
C-more EA9 HMI EA9-RHMI 0
C-more EA9 HMI EA9-T10CL 0
C-more EA9 HMI EA9-T10WCL 0
References
CVSS V4
Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Sharon Brizinov of Claroty Team82 reported this vulnerability to CISA.