CVE-2020-6969
It is possible to unmask credentials and other sensitive information on ?unprotected? project...
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.
- Record
CVE-2020-6969- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-522
- Updated
- 2026-11-02
CVE List No score
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.
- Record
CVE-2020-6969- Weakness
- CWE-522
- Updated
- 2026-11-02
EUVDEUVD-2020-28109 No score
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.
- Record
EUVD-2020-28109- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vvr7-5892-5mm9 No score
It is possible to unmask credentials and other sensitive information on ?unprotected? project...
It is possible to unmask credentials and other sensitive information on ?unprotected? project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.
- Record
GHSA-vvr7-5892-5mm9- Updated
- 2026-11-02
Affected products
- automation direct c-more touch panels ea9 series
- automationdirect c-more ea9-rhi firmware
- automationdirect c-more ea9-t10cl firmware
- automationdirect c-more ea9-t10wcl firmware
- automationdirect c-more ea9-t12cl firmware
- automationdirect c-more ea9-t15cl-r firmware
- automationdirect c-more ea9-t15cl firmware
- automationdirect c-more ea9-t6cl-r firmware
- automationdirect c-more ea9-t6cl firmware
- automationdirect c-more ea9-t7cl-r firmware
- automationdirect c-more ea9-t7cl firmware
- automationdirect c-more ea9-t8cl firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-6969 is a critical vulnerability (CVSS 9.8) in Automation Direct C-more Touch Panels Ea9 Series, published February 5, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.37%, the 83rd percentile. No source names a fixed version.