Skip to content
OpenAdvisories
High · 7.5 CVE-2020-10922 EUVD-2020-3328GHSA-wcf2-mm7g-vqrm

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE HMI EA9 Firmware ver…

Published Jul 23, 2020 · Updated Aug 4, 2024 · Assigned by zdi

Description

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lack of proper input validation prior to further processing user requests. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-10527.

Affected products

VendorProductAffectedFixed
C-MORE HMI EA9 Firmware version 6.52 —

References