CVE-2020-6969
Last modified
CVE-2020-6969 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.. EPSS estimates a 2.24% chance of exploitation in the next 30 days.
Description
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Automationdirect | C-More Ea9-Rhi Firmware | < 6.53 |
| Automationdirect | C-More Ea9-T6cl-R Firmware | < 6.53 |
| Automationdirect | C-More Ea9-T6cl Firmware | < 6.53 |
| Automationdirect | C-More Ea9-T7cl-R Firmware | < 6.53 |
| Automationdirect | C-More Ea9-T7cl Firmware | < 6.53 |
| Automationdirect | C-More Ea9-T8cl Firmware | < 6.53 |
| Automationdirect | C-More Ea9-T10cl Firmware | < 6.53 |
| Automationdirect | C-More Ea9-T10wcl Firmware | < 6.53 |
| Automationdirect | C-More Ea9-T12cl Firmware | < 6.53 |
| Automationdirect | C-More Ea9-T15cl-R Firmware | < 6.53 |
| Automationdirect | C-More Ea9-T15cl Firmware | < 6.53 |
References
- https://www.us-cert.gov/ics/advisories/icsa-20-035-01Patch, Third Party Advisory, US Government Resource
- https://www.us-cert.gov/ics/advisories/icsa-20-035-01Patch, Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-6969?
How severe is CVE-2020-6969?
How do I fix CVE-2020-6969?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-6963In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAP…10
- CVE-2020-6964In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAP…8.6
- CVE-2020-6965In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAP…9.9
- CVE-2020-6966In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAP…10
- CVE-2020-6967In Rockwell Automation all versions of FactoryTalk Diagnosti…9.8
- CVE-2020-6968Honeywell INNCOM INNControl 3 allows workstation users to es…7.8
- CVE-2020-6970A Heap-based Buffer Overflow was found in Emerson OpenEnterp…9.8
- CVE-2020-6971In Emerson ValveLink v12.0.264 to v13.4.118, a vulnerability…7.8
- CVE-2020-6972In Notifier Web Server (NWS) Version 3.50 and earlier, the H…9.1
- CVE-2020-6973Digi International ConnectPort LTS 32 MEI, Firmware Version …6.2
- CVE-2020-6974Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerab…9.8
- CVE-2020-6975Digi International ConnectPort LTS 32 MEI, Firmware Version …4.9
Are you affected by CVE-2020-6969?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
