Vulnerability · Published Sep 13, 2024 · Assigned by icscert
CVE-2024-43099AutomationDirect DirectLogic H2-DM1E Authentication Bypass by Capture-replay
High 8.8
In plain English
A high-severity security flaw in DirectLogic H2-DM1E from AutomationDirect. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Official description
The session hijacking attack targets the application layer's control mechanism, which manages authenticated sessions between a host PC and a PLC. During such sessions, a session key is utilized to maintain security. However, if an attacker captures this session key, they can inject traffic into an ongoing authenticated session. To successfully achieve this, the attacker also needs to spoof both the IP address and MAC address of the originating host which is typical of a session-based attack.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AutomationDirect | DirectLogic H2-DM1E | 0 – through 2.8.0 |
Weakness: CWE-294 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H