AutomationDirect C-MORE EA9 HMI
There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL without properly sanitizing the content. In AutomationDirect C-MORE EA9 HMI there is a program that copies a buffer of a size controlled by the user into a limited sized buffer on the stack which leads to a stack overflow. The result of this stack-based buffer overflow will lead to a denial-of-service condition.  In AutomationDirect C-MORE EA9 HMI credentials used by the platform are stored as plain text on the device.