ZeroHour

CVE-2020-6969

CVSS 3.1
9.8 critical
EPSS
2%p83
Published
()
Modified
Description

It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.

Vendors
automationdirect
Products
c-more ea9-rhi firmware, c-more ea9-t6cl-r firmware, c-more ea9-t6cl firmware, c-more ea9-t7cl-r firmware, c-more ea9-t7cl firmware, c-more ea9-t8cl firmware, c-more ea9-t10cl firmware, c-more ea9-t10wcl firmware, c-more ea9-t12cl firmware, c-more ea9-t15cl-r firmware, c-more ea9-t15cl firmware
Weakness
CWE-522
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news