CVE-2020-10919CWE-261

This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen…

Medium · published July 23, 2020

CVSS v3.0
5.9
EPSS
2%
Percentile
75.5
In the wild
Unconfirmed
What it is

This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen panels. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. When transmitting passwords, the process encrypts them in a recoverable format. An attacker can leverage this vulnerability to disclose credentials, leading to further compromise. Was ZDI-CAN-10185.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01591 · 75.5th percentile
Weakness
CWE-261 · Weak Encoding for Password
Published
2020-07-23T15:35Z
EPSS history
Timeline
  • 23 JUL 15:35Z
    This vulnerability allows remote attackers to disclose sensitive information on affected installations of C-MORE HMI EA9 Firmware version 6.52 touch screen…
    cvelistv5