CVE-2020-10919 - CVE House
Back to Database
Status published Medium CVE-2020-10919

This vulnerability allows remote attackers to disclose sensitive information on...

Vulnerability Description

This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. When transmitting passwords, the process encrypts them in a recoverable format. An attacker can leverage this vulnerability to disclose credentials, leading to further compromise. Was ZDI-CAN-10185.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-10919

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Ta-Lun Yen & Chizuru Toyama of TXOne IoT/ICS Security Research Labs (Trend Micro)

References

More from C-MORE

View All →
CVE-2020-10922
This vulnerability allows remote attackers to create a denial-of-service condition...
High 7.5
CVE-2020-10921
This vulnerability allows remote attackers to issue commands on affected...
Critical 9.8
CVE-2020-10920
This vulnerability allows remote attackers to execute arbitrary code on...
Critical 9.8
CVE-2020-10918
This vulnerability allows remote attackers to bypass authentication on affected...
High 7.5

Affected Vendor

Affected Software

HMI EA9
Vulnerable Versions:
Firmware version 6.52

Timeline

Official Publish: July 23rd, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-261

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.