PT-2025-14824 · Eaton · Hmi Viewjet C-More Series

Published 2025-04-02 · Updated 2025-04-04 · CVE-2025-24310

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions HMI ViewJet C-more series (affected versions not specified)

Description The issue is related to improper restriction of rendered UI layers or frames, which may allow a remote unauthenticated attacker to trick the product user into performing operations on the product's web pages. This could potentially lead to unauthorized actions being taken on the product.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

BDU:2025-03770

CVE-2025-24310

Affected Products

Hmi Viewjet C-More Series

References · 10

• https://bdu.fstec.ru/vul/2025-03770 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-24310 · Security Note
• https://jvn.jp/en/jp/JVN17260367/index.html · Note
• https://jvn.jp/en/jp/JVN17260367 · Note
• https://t.me/cvetracker/20765 · Telegram Post
• https://electronics.jtekt.co.jp/en/topics/202503207271 · Note
• https://t.me/cvedetector/22069 · Telegram Post
• https://twitter.com/CVEnew/status/1908072030261358606 · Twitter Post
• https://t.me/cvenotify/117682 · Telegram Post
• https://electronics.jtekt.co.jp/en/topics/202503247271 · Note