CVE-2020-10920

Vulnerability

The vulnerability resides in the control service of C-MORE HMI EA9 touch screen panels running firmware version 6.52. The control service listens on TCP port 9999 by default and fails to require any authentication before allowing changes to the system configuration. This missing authentication for a critical function enables an unauthenticated attacker to modify the device configuration remotely [1].

Exploitation

An attacker can exploit this flaw without any authentication or prior access to the device. By sending crafted network packets to the control service on TCP port 9999, the attacker can alter system configuration parameters. Since no credentials or user interaction are required, the exploitation is straightforward and can be conducted over the network from any remote location [1].

Impact

Successful exploitation grants the attacker the ability to execute arbitrary code in the context of the affected device. This can lead to full compromise of the HMI panel, including disclosure of sensitive information, modification of system settings, and potential denial of service. The CVSS score of 9.8 reflects the critical impact on confidentiality, integrity, and availability [1].

Mitigation

As of the publication date (2020-07-23), no official patch or firmware update addressing this vulnerability had been released. The vendor has not provided a workaround. Operators are advised to isolate affected devices from untrusted networks, restrict access to TCP port 9999 using firewalls, and monitor for any updates from C-MORE. This vulnerability is not currently listed in the CISA Known Exploited Vulnerabilities catalog [1].