ICS Advisory: Automation-Direct C-MORE EA9 HMI

Here is a professional and concise summary of the provided document:

Summary:

A vulnerability has been identified in AutomationDirect's C-MORE EA9 HMI display system, which can be exploited remotely with low attack complexity. The vulnerabilities, rated CVSS v3 7.5, include Path Traversal, Stack-Based Buffer Overflow, and Plaintext Storage of a Password. Impacted versions include all versions prior to 6.78. Successful exploitation could allow an attacker to inject malicious code on the panel or access sensitive information. To mitigate the risks, AutomationDirect recommends updating to version 6.78, and CISA recommends minimizing network exposure, using firewalls, and implementing defensive measures. No public exploitation has been reported to date.