What’s Vulnerable › Vulnerabilities

CVE-2025-0960: AutomationDirect C-more EA9 HMI Classic Buffer Overflow

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-04 · updated 2026-06-17
• Weakness: CWE-120

Description

AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device.

Affected products

• AutomationDirect C-MORE EA9 HMI EA9-RHMI: through v6.79
• AutomationDirect C-MORE EA9 HMI EA9-T10CL: through v6.79
• AutomationDirect C-MORE EA9 HMI EA9-T10WCL: through v6.79
• AutomationDirect C-MORE EA9 HMI EA9-T12CL: through v6.79
• AutomationDirect C-MORE EA9 HMI EA9-T15CL: through v6.79
• AutomationDirect C-MORE EA9 HMI EA9-T15CL-R: through v6.79
• AutomationDirect C-MORE EA9 HMI EA9-T6CL: through v6.79
• AutomationDirect C-MORE EA9 HMI EA9-T7CL: through v6.79
• AutomationDirect C-more EA9 HMI EA9-T7CL-R: through v6.79
• AutomationDirect C-MORE EA9 HMI EA9-T8CL: through v6.79

References

• https://community.automationdirect.com/s/cybersecurity/security-advisories
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-035-08

Get alerted when CVE-2025-0960 or the next vulnerability affects your stack