CVE-2025-0960: Automationdirect C-More EA9 HMI EA9-Rhmi

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

AutomationDirect C-more EA9 HMI contains a function with bounds checks that can be skipped, which could result in an attacker abusing the function to cause a denial-of-service condition or achieving remote code execution on the affected device.

Affected products

• Automationdirect C-More EA9 HMI EA9-Rhmi: up to and including v6.79
• Automationdirect C-More EA9 HMI EA9-t10cl: up to and including v6.79
• Automationdirect C-More EA9 HMI EA9-t10wcl: up to and including v6.79
• Automationdirect C-More EA9 HMI EA9-t12cl: up to and including v6.79
• Automationdirect C-More EA9 HMI EA9-t15cl: up to and including v6.79
• Automationdirect C-More EA9 HMI EA9-t15cl-R: up to and including v6.79
• Automationdirect C-More EA9 HMI EA9-t6cl: up to and including v6.79
• Automationdirect C-More EA9 HMI EA9-t7cl: up to and including v6.79
• Automationdirect C-More EA9 HMI EA9-t7cl-R: up to and including v6.79
• Automationdirect C-More EA9 HMI EA9-t8cl: up to and including v6.79

Published 2025-02-04. Last modified 2026-06-17.