Critical · published July 23, 2020
🚨 A simple connection to TCP port 9999 could let attackers run wild on your C-MORE HMI EA9 panel without any authentication! 🔥 Think of it like leaving the back door to a high-tech control room wide open without a lock — anyone can just walk in and start pushing buttons at will! An attacker could essentially take over the device, executing any code they wish. This could lead to catastrophic failures, unauthorized changes, or even manipulation of critical processes, putting safety and security at serious risk.
Think of it like leaving the back door to a high-tech control room wide open without a lock — anyone can just walk in and start pushing buttons at will! This vulnerability occurs due to a lack of authentication in the control service on TCP port 9999, allowing remote attackers to execute arbitrary code on the device without any safeguards in place.
An attacker could essentially take over the device, executing any code they wish. This could lead to catastrophic failures, unauthorized changes, or even manipulation of critical processes, putting safety and security at serious risk. Immediately patch your C-MORE HMI EA9 Firmware to version 6.53 or later to close this security hole. Additionally, consider blocking access to port 9999 from untrusted networks and reviewing your network security policies to mitigate exposure. You’ve got this! Follow these steps, and you’ll boost your defenses in no time! 🛡️