CVE-2025-0960

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
AutomationDirectC-more EA9 HMI EA9-T6CL<= v6.79
AutomationDirectC-more EA9 HMI EA9-T7CL-R<= v6.79
AutomationDirectC-more EA9 HMI EA9-T7CL<= v6.79
AutomationDirectC-more EA9 HMI EA9-T8CL<= v6.79
AutomationDirectC-more EA9 HMI EA9-T10CL<= v6.79
AutomationDirectC-more EA9 HMI EA9-T10WCL<= v6.79
AutomationDirectC-more EA9 HMI EA9-T12CL<= v6.79
AutomationDirectC-more EA9 HMI EA9-T15CL-R<= v6.79
AutomationDirectC-more EA9 HMI EA9-T15CL<= v6.79
AutomationDirectC-more EA9 HMI EA9-RHMI<= v6.79

References

Timeline

Published
Feb 4, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-09615.4A vulnerability, which was classified as problematic, has been found in code-projects Job Recruitment 1.0. Affected by this issue is some unCVE-2025-09667.6IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which couCVE-2025-09677.5A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the filCVE-2025-09685.3The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, CVE-2025-09696.5The Brizy – Page Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.16 vCVE-2025-09706.1A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been declared as problematic. Affected by this vulnerability is an unknoCVE-2025-09715.4A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been rated as problematic. Affected by this issue is some unknown functiCVE-2025-09725.4A vulnerability classified as problematic has been found in Zenvia Movidesk up to 25.01.22. This affects an unknown part of the component NeCVE-2025-09736.5A vulnerability classified as critical was found in CmsEasy 7.7.7.9. This vulnerability affects the function backAll_action in the library lCVE-2025-09745.0A vulnerability was determined in MaxD Lightning Module 4.43/4.44 on OpenCart. This issue affects some unknown processing. Executing a manipCVE-2025-09758.8IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escaCVE-2025-09767.5Information Exposure Vulnerability in Hitachi Ops Center API Configuration Manager, Hitachi Configuration Manager.This issue affects Hitachi