critical9.8
CVE-2020-6969
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More …
Impact
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Automationdirect | C-More Ea9-Rhi Firmware | before 6.53 |
| Automationdirect | C-More Ea9-T6cl-R Firmware | before 6.53 |
| Automationdirect | C-More Ea9-T6cl Firmware | before 6.53 |
| Automationdirect | C-More Ea9-T7cl-R Firmware | before 6.53 |
| Automationdirect | C-More Ea9-T7cl Firmware | before 6.53 |
| Automationdirect | C-More Ea9-T8cl Firmware | before 6.53 |
| Automationdirect | C-More Ea9-T10cl Firmware | before 6.53 |
| Automationdirect | C-More Ea9-T10wcl Firmware | before 6.53 |
| Automationdirect | C-More Ea9-T12cl Firmware | before 6.53 |
| Automationdirect | C-More Ea9-T15cl-R Firmware | before 6.53 |
| Automationdirect | C-More Ea9-T15cl Firmware | before 6.53 |