CVE-2022-2006CWE-427

AutomationDirect C-more EA9 HMI Uncontrolled Search Path Element

High · published August 31, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior to 6.73; EA9-T7CL versions prior to 6.73; EA9-T7CL-R versions prior to 6.73; EA9-T8CL versions prior to 6.73; EA9-T10CL versions prior to 6.73; EA9-T10WCL versions prior to 6.73; EA9-T12CL versions prior to 6.73; EA9-T15CL versions prior to 6.73; EA9-RHMI versions prior to 6.73; EA9-PGMSW versions prior to 6.73;

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00356 · 28.1th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2022-08-31T15:33Z
EPSS history
Timeline
  • 31 AUG 15:33Z
    AutomationDirect C-more EA9 HMI Uncontrolled Search Path Element
    cvelistv5