Automationdirect h2-DM1E Firmware vulnerabilities

2 CVEs affecting Automationdirect h2-DM1E Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-45368, published 2024-09-13.

More from Automationdirect.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-45368, published 2024-09-13. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol…
• CVE-2024-43099, published 2024-09-13. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions between a host PC and a PLC. During such sessions, a session key is utilized to…