CVE-2022-2006

AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior to 6.73; EA9-T7CL versions prior to 6.73; EA9-T7CL-R versions prior to 6.73; EA9-T8CL versions prior to 6.73; EA9-T10CL versions prior to 6.73; EA9-T10WCL versions prior to 6.73; EA9-T12CL versions prior to 6.73; EA9-T15CL versions prior to 6.73; EA9-RHMI versions prior to 6.73; EA9-PGMSW versions prior to 6.73;
References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-167-01 Patch Third Party Advisory US Government Resource
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-t6cl_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-t6cl:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-t6cl-r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-t6cl-r:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-t7cl_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-t7cl:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-t7cl-r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-t7cl-r:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-t8cl_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-t8cl:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-t10cl_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-t10cl:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-t10wcl_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-t10wcl:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-t12cl_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-t12cl:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-t15cl_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-t15cl:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-t15cl-r_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-t15cl-r:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-rhmi_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-rhmi:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:automationdirect:c-more_ea9-pgmsw_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:c-more_ea9-pgmsw:-:*:*:*:*:*:*:*

Information

Published : 2022-08-31 09:15

Updated : 2022-09-06 16:48


NVD link : CVE-2022-2006

Mitre link : CVE-2022-2006


JSON object : View

CWE
CWE-427

Uncontrolled Search Path Element

Advertisement

dedicated server usa

Products Affected

automationdirect

  • c-more_ea9-t15cl_firmware
  • c-more_ea9-t6cl_firmware
  • c-more_ea9-t12cl
  • c-more_ea9-t7cl-r_firmware
  • c-more_ea9-t7cl
  • c-more_ea9-pgmsw_firmware
  • c-more_ea9-pgmsw
  • c-more_ea9-t6cl-r
  • c-more_ea9-t15cl-r_firmware
  • c-more_ea9-t8cl_firmware
  • c-more_ea9-t12cl_firmware
  • c-more_ea9-t15cl
  • c-more_ea9-rhmi
  • c-more_ea9-t6cl
  • c-more_ea9-t8cl
  • c-more_ea9-t15cl-r
  • c-more_ea9-t7cl-r
  • c-more_ea9-t6cl-r_firmware
  • c-more_ea9-t10wcl
  • c-more_ea9-t10wcl_firmware
  • c-more_ea9-t7cl_firmware
  • c-more_ea9-t10cl_firmware
  • c-more_ea9-rhmi_firmware
  • c-more_ea9-t10cl