I don't think the Cmore caches anything on the password screen (I've never seen it do it). Are you running the program on the actual Cmore, or are you using the simulation in the Cmore program?
And just to be clear, when you say it allows you through without even hitting enter. You press a button that is passworded, the keyboard pops up, and you just hit one number and it acts like you typed the whole thing and pressed enter, and lets you do what ever that button was supposed to do?
Is there any chance that the PLC program is requesting the screen to change? I think a PLC requested screen change overrides any passwords on the Cmore. And remember that moving Zero into the screen request file makes the Cmore go back to the previous screen. So if they were on the password screen, then went back to the main screen, and were going to head back to that passworded screen, the PLC might be doing something and moved Zero into the file, making the Cmore go back to the passworded screen without any input from the operator.