CVE-2020-10920

This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the control service, which listens on TCP port...

CVE-2020-10919

This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. When...

CVE-2020-10918

This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due t...

CVE-2020-10918

CVE-2020-10918 describes an authentication bypass in the C-MORE HMI EA9 firmware. Affected product: C-MORE HMI EA9 touch screen panels with firmware version 6.52. The flaw is in the authentication mechanism and relies on insufficient authentication for post-authentication requests, enabling remot...

CVE-2020-10919

CVE-2020-10919 affects C-MORE HMI EA9 Firmware v6.52 touch screen panels. The root cause is insecure password handling: passwords are transmitted and stored/encrypted in a recoverable format (hard-coded key in some reports), enabling credential disclosure without authentication. Multiple sources ...

CVE-2020-10922: Improper Input Validation

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issu...

CVE-2020-10921: Missing Authentication for Critical Function

This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lac...

CVE-2020-10919: Weak Encoding for Password

This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. When...

CVE-2020-10918: Improper Authentication

This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due t...

CVE-2020-10920: Missing Authentication for Critical Function

This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the control service, which listens on TCP port...

C-MORE HMI EA9 Authentication Bypass Vulnerability

The C-More HMI EA9 is the human machine interface touch panel. An authentication bypass vulnerability exists in the C-MORE HMI EA9, which can be exploited by remote attackers to bypass authentication...

C-MORE HMI EA9 Encryption Issue Vulnerability

The C-More HMI EA9 is the human machine interface touch panel. The C-MORE HMI EA9 is vulnerable to an encryption issue that could be exploited by an attacker to obtain sensitive information...

C-MORE HMI EA9 Access Control Error Vulnerability (CNVD-2020-49043)

The C-More HMI EA9 is the human machine interface touch panel. An access control error vulnerability exists in the EA-HTTP.exe process in the C-More HMI EA9, which can be exploited by an attacker to issue commands to a physical device controlled by the device...

C-More HMI EA9 Access Control Error Vulnerability

The C-More HMI EA9 is the human machine interface touch panel. An access control error vulnerability exists in the C-More HMI EA9 control port, which can be exploited by remote attackers to execute arbitrary code...

PT-2020-12423

Name of the Vulnerable Software and Affected Versions C-MORE HMI EA9 Firmware version 6.52 Description This issue allows remote attackers to create a denial-of-service condition on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...

PT-2020-12420 · C More · C-More Hmi Ea9 Firmware

Name of the Vulnerable Software and Affected Versions: C-MORE HMI EA9 Firmware version 6.52 Description: This issue allows remote attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the handli...

PT-2020-12422

Name of the Vulnerable Software and Affected Versions C-MORE HMI EA9 Firmware version 6.52 Description This issue allows remote attackers to issue commands on affected installations without requiring authentication. The flaw exists within the EA-HTTP.exe process due to the lack of authentication...

C-MORE HMI EA9 Control Port Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-More HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the control service, which listens on TCP port 9999 by default. The...

C-MORE HMI EA9 EA-HTTP Improper Input Validation Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-More HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lac...

C-MORE HMI EA9 Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due to insufficient...