Authentication flaw

This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due t...

Design/Logic Flaw

This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lac...

Design/Logic Flaw

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issu...

CVE-2020-10922

CVE-2020-10922 affects C-MORE HMI EA9 Firmware v6.52 touch screen panels. The flaw is in EA-HTTP.exe and stems from insufficient input validation in processing user requests, enabling remote denial-of-service without authentication. Public references include ZDI-20-809 (ZDI advisory) and Red Hat ...

CVE-2020-10920

This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the control service, which listens on TCP port...

CVE-2020-10921

This CVE affects C-MORE HMI EA9 touch screen panels running firmware 6.52. The flaw is in the EA-HTTP.exe process and stems from a lack of authentication, enabling remote attackers to issue commands to the physical device without credentials. Connected sources (ZDI advisory and NVD/Red Hat entrie...

CVE-2020-10921

This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lac...

CVE-2020-10920

The CVE-2020-10920 entry affects C-MORE HMI EA9 firmware (version 6.52) touch screen panels. The flaw lies in the control service that listens on TCP port 9999 and lacks authentication, enabling remote attackers to execute arbitrary code in the device’s context. Multiple connected sources (e.g., ...

CVE-2020-10918

CVE-2020-10918 describes an authentication bypass in the C-MORE HMI EA9 firmware. Affected product: C-MORE HMI EA9 touch screen panels with firmware version 6.52. The flaw is in the authentication mechanism and relies on insufficient authentication for post-authentication requests, enabling remot...

CVE-2020-10919

CVE-2020-10919 affects C-MORE HMI EA9 Firmware v6.52 touch screen panels. The root cause is insecure password handling: passwords are transmitted and stored/encrypted in a recoverable format (hard-coded key in some reports), enabling credential disclosure without authentication. Multiple sources ...

CVE-2020-10919

This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. When...

CVE-2020-10918

This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due t...

C-MORE HMI EA9 Authentication Bypass Vulnerability

The C-More HMI EA9 is the human machine interface touch panel. An authentication bypass vulnerability exists in the C-MORE HMI EA9, which can be exploited by remote attackers to bypass authentication...

C-MORE HMI EA9 Access Control Error Vulnerability (CNVD-2020-49043)

The C-More HMI EA9 is the human machine interface touch panel. An access control error vulnerability exists in the EA-HTTP.exe process in the C-More HMI EA9, which can be exploited by an attacker to issue commands to a physical device controlled by the device...

C-More HMI EA9 Access Control Error Vulnerability

The C-More HMI EA9 is the human machine interface touch panel. An access control error vulnerability exists in the C-More HMI EA9 control port, which can be exploited by remote attackers to execute arbitrary code...

C-MORE HMI EA9 Encryption Issue Vulnerability

The C-More HMI EA9 is the human machine interface touch panel. The C-MORE HMI EA9 is vulnerable to an encryption issue that could be exploited by an attacker to obtain sensitive information...

C-MORE HMI EA9 Control Port Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-More HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the control service, which listens on TCP port 9999 by default. The...

C-MORE HMI EA9 Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of C-MORE HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authentication mechanism. The issue is due to insufficient...

PT-2020-12420 · C More · C-More Hmi Ea9 Firmware

Name of the Vulnerable Software and Affected Versions: C-MORE HMI EA9 Firmware version 6.52 Description: This issue allows remote attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the handli...

C-MORE HMI EA9 EA-HTTP Missing Authentication for Critical Function Remote Code Execution Vulnerability

This vulnerability allows remote attackers to issue commands on affected installations of C-More HMI EA9 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lack of authentication...