CVE-2020-10922

HIGH

7.5

CVSS Score

Published: July 23, 2020 at 03:35 PM UTC

Updated: June 17, 2026 at 02:48 AM UTC

14 products affected across 2 vendorsC More HMI EA9 FirmwareEa9-T6Cl-REa9-T8Cl

Using HMI EA9 by C-MORE?

Get instant alerts when new vulnerabilities affect HMI EA9 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 4%

Description

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the EA-HTTP.exe process. The issue results from the lack of proper input validation prior to further processing user requests. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-10527.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

C More HMI EA9 Firmware · Automationdirect

95%

6.52

automationdirect-ea9-pgmsw (environment) · automationdirect-ea9-rhmi (environment) · automationdirect-ea9-t10cl (environment) · automationdirect-ea9-t10wcl (environment) · automationdirect-ea9-t12cl (environment) · automationdirect-ea9-t15cl (environment) · automationdirect-ea9-t15cl-r (environment) · automationdirect-ea9-t6cl (environment) · automationdirect-ea9-t6cl-r (environment) · automationdirect-ea9-t7cl (environment) · automationdirect-ea9-t7cl-r (environment) · automationdirect-ea9-t8cl (environment)

HMI EA9 · C More

60%

6.52

Ea9-Pgmsw · Automationdirectdevice

80%

All versions

Ea9-Rhmi · Automationdirectdevice

80%

All versions

Ea9-T10Cl · Automationdirectdevice

80%

All versions