CVE-2024-11609

Summary

CVE-2024-11609 is a stack-based buffer overflow vulnerability affecting AutomationDirect's C-More EA9 and EAP9 devices. The issue lies in the file parsing process, where user-supplied data is not adequately validated before being copied to a fixed-length buffer. This weakness allows remote attackers to execute arbitrary code by exploiting this vulnerability. Users are put at risk when they visit malicious pages or open malicious files. The flaw, discovered as ZDI-CAN-24772, was reported to CERT and AutomationDirect.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.