CVE-2022-2006 AutomationDirect C-more EA9 HMI Uncontrolled Search Path Element
An attacker can execute arbitrary code during the installation of AutomationDirect C-more EA9 HMI software due to an uncontrolled search path element.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2022-2006?
CVE-2022-2006 is a high-severity vulnerability in AutomationDirect C-more EA9, published on 31 Aug 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
AutomationDirect DirectLOGIC has a DLL vulnerability in the install directory that may allow an attacker to execute code during the installation process. This issue affects: AutomationDirect C-more EA9 EA9-T6CL versions prior to 6.73; EA9-T6CL-R versions prior to 6.73; EA9-T7CL versions prior to 6.73; EA9-T7CL-R versions prior to 6.73; EA9-T8CL versions prior to 6.73; EA9-T10CL versions prior to 6.73; EA9-T10WCL versions prior to 6.73; EA9-T12CL versions prior to 6.73; EA9-T15CL versions prior to 6.73; EA9-RHMI versions prior to 6.73; EA9-PGMSW versions prior to 6.73;
Weakness: CWE-427
Which versions are affected by CVE-2022-2006?
It affects 12 products.
Products include Automationdirect C-More Ea9-Pgmsw Firmware, Automationdirect C-More Ea9-Rhmi Firmware, Automationdirect C-More Ea9-T10cl Firmware, Automationdirect C-More Ea9-T10wcl Firmware, Automationdirect C-More Ea9-T12cl Firmware, Automationdirect C-More Ea9-T15cl-R Firmware and 6 more.
How do I fix CVE-2022-2006?
No fix has been published for CVE-2022-2006 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-2006 being exploited?
There is no known exploitation of CVE-2022-2006 in the wild and no public exploit code.
Other vulnerabilities in AutomationDirect C-more EA9
Sources
Also known as GHSA-qxq5-p7h4-x2vw.