CVE-2020-10919

CVE-2020-10919 affects C-MORE HMI EA9 Firmware v6.52 touch screen panels. The root cause is insecure password handling: passwords are transmitted and stored/encrypted in a recoverable format (hard-coded key in some reports), enabling credential disclosure without authentication. Multiple sources ...

C-MORE HMI EA9 Access Control Error Vulnerability (CNVD-2020-49043)

The C-More HMI EA9 is the human machine interface touch panel. An access control error vulnerability exists in the EA-HTTP.exe process in the C-More HMI EA9, which can be exploited by an attacker to issue commands to a physical device controlled by the device...

C-MORE HMI EA9 Encryption Issue Vulnerability

The C-More HMI EA9 is the human machine interface touch panel. The C-MORE HMI EA9 is vulnerable to an encryption issue that could be exploited by an attacker to obtain sensitive information...

C-More HMI EA9 Access Control Error Vulnerability

The C-More HMI EA9 is the human machine interface touch panel. An access control error vulnerability exists in the C-More HMI EA9 control port, which can be exploited by remote attackers to execute arbitrary code...

C-MORE HMI EA9 EA-HTTP Improper Input Validation Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-More HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lac...

C-MORE HMI EA9 Control Port Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-More HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the control service, which listens on TCP port 9999 by default. The...

C-MORE HMI EA9 EA-HTTP Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to issue commands on affected installations of C-More HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lack of authentication...

C-MORE HMI EA9 Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due to insufficient...

CVE-2020-6969

It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations...

CVE-2020-6969

It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations...

ICSA-20-035-01_AutomationDirect C-More Touch Panels

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: AutomationDirect Equipment: C-More Touch Panels EA9 Series Vulnerability: Insufficiently Protected Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an...