Vendor
AutomationDirect
66 known vulnerabilities in products by AutomationDirect, 0 of them actively exploited (CISA KEV).
Key figures
66
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
16
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-10920 | C-MORE HMI EA9: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2020-10921 | C-MORE HMI EA9: Missing Authentication for Critical Function | 9.8 | |
| Critical | CVE-2020-6969 | C-More Touch Panels EA9 series: Insufficiently Protected Credentials | 9.8 | |
| High | CVE-2020-10922 | C-MORE HMI EA9: Improper Input Validation | 7.5 | |
| Critical | CVE-2024-21785 | AutomationDirect P3-550E: Active Debug Code | 9.8 | |
| High | CVE-2020-10918 | C-MORE HMI EA9: Improper Authentication | 7.5 | |
| Critical | CVE-2016-9335 | Red Lion Controls Sixnet-Managed Industrial Switches: Use of Hard-coded Cryptographic Key | 10.0 | |
| Critical | CVE-2024-24963 | AutomationDirect P3-550E: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2024-24962 | AutomationDirect P3-550E: Stack-based Buffer Overflow | 9.8 | |
| High | CVE-2024-24851 | AutomationDirect P3-550E: Buffer Access with Incorrect Length Value | 7.5 | |
| Critical | CVE-2025-0960 | AutomationDirect C-more EA9 HMI Classic Buffer Overflow | 9.8 | |
| Critical | CVE-2021-32986 | Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel | 9.8 | |
| Critical | CVE-2021-32984 | Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel | 9.8 | |
| Critical | CVE-2021-32980 | Automation Direct CLICK PLC CPU Modules Authentication Bypass Using an Alternate Path or Channel | 9.8 | |
| Critical | CVE-2024-22187 | AutomationDirect P3-550E: Improper Access Control | 9.1 | |
| Critical | CVE-2025-61934 | AutomationDirect Productivity Suite Binding to an Unrestricted IP Address CWE-1327 | 10.0 | |
| Critical | CVE-2024-23601 | AutomationDirect P3-550E: Insufficient Verification of Data Authenticity | 9.8 | |
| Medium | CVE-2020-10919 | C-MORE HMI EA9: Weak Encoding for Password | 5.9 | |
| High | CVE-2017-14020 | AutomationDirect CLICK Programming Software (Part Number C0-PGMSW): Uncontrolled Search Path Element | 7.8 | |
| High | CVE-2024-23315 | AutomationDirect P3-550E: Improper Access Control | 7.5 | |
| High | CVE-2024-24947 | AutomationDirect P3-550E: Out-of-bounds Write | 8.2 | |
| High | CVE-2025-58429 | AutomationDirect Productivity Suite Relative Path Traversal | 7.5 | |
| High | CVE-2025-58078 | AutomationDirect Productivity Suite Relative Path Traversal | 7.5 | |
| High | CVE-2025-58456 | AutomationDirect Productivity Suite Relative Path Traversal | 6.8 | |
| High | CVE-2025-62498 | AutomationDirect Productivity Suite Relative Path Traversal | 8.8 |