CVE-2024-45368: Automationdirect Directlogic h2-DM1E

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as valid authentication responses. This behavior deviates from standard security practices where a single, specific response or encoding pattern is expected for successful authentication.

Affected products

• Automationdirect Directlogic h2-DM1E: up to and including 2.8.0
• Automationdirect h2-DM1E Firmware: up to and including 2.8.0

Published 2024-09-13. Last modified 2026-06-17.