Insufficiently protected credentials in C-More Touch Panels EA9 series
Priority MEDIUM 47CWE-522Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-522.
Summary
It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.
Why it matters now
EPSS 0.02374 83rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | C-More Touch Panels EA9 series | firmware versions prior to 6.53 | — | No fix listed | CNA |
- C-More Touch Panels EA9 series Vendor— Affected firmware versions prior to 6.53 Fixed in — No fix listed CNA
CPE configurations NVD · 22
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:automationdirect:c-more_ea9-rhi_firmware:*:*:*:*:*:*:*:* | before 6.53 | Vulnerable | AutomationDirect |
| cpe:2.3:h:automationdirect:c-more_ea9-rhi:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AutomationDirect |
| cpe:2.3:o:automationdirect:c-more_ea9-t6cl-r_firmware:*:*:*:*:*:*:*:* | before 6.53 | Vulnerable | AutomationDirect |
| cpe:2.3:h:automationdirect:c-more_ea9-t6cl-r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AutomationDirect |
| cpe:2.3:o:automationdirect:c-more_ea9-t6cl_firmware:*:*:*:*:*:*:*:* | before 6.53 | Vulnerable | AutomationDirect |
| cpe:2.3:h:automationdirect:c-more_ea9-t6cl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AutomationDirect |
| cpe:2.3:o:automationdirect:c-more_ea9-t7cl-r_firmware:*:*:*:*:*:*:*:* | before 6.53 | Vulnerable | AutomationDirect |
| cpe:2.3:h:automationdirect:c-more_ea9-t7cl-r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AutomationDirect |
| cpe:2.3:o:automationdirect:c-more_ea9-t7cl_firmware:*:*:*:*:*:*:*:* | before 6.53 | Vulnerable | AutomationDirect |
| cpe:2.3:h:automationdirect:c-more_ea9-t7cl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AutomationDirect |
- cpe:2.3:o:automationdirect:c-more_ea9-rhi_firmware:*:*:*:*:*:*:*:* Versions before 6.53 Vulnerable ·AutomationDirect
- cpe:2.3:h:automationdirect:c-more_ea9-rhi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
- cpe:2.3:o:automationdirect:c-more_ea9-t6cl-r_firmware:*:*:*:*:*:*:*:* Versions before 6.53 Vulnerable ·AutomationDirect
- cpe:2.3:h:automationdirect:c-more_ea9-t6cl-r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
- cpe:2.3:o:automationdirect:c-more_ea9-t6cl_firmware:*:*:*:*:*:*:*:* Versions before 6.53 Vulnerable ·AutomationDirect
- cpe:2.3:h:automationdirect:c-more_ea9-t6cl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
- cpe:2.3:o:automationdirect:c-more_ea9-t7cl-r_firmware:*:*:*:*:*:*:*:* Versions before 6.53 Vulnerable ·AutomationDirect
- cpe:2.3:h:automationdirect:c-more_ea9-t7cl-r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
- cpe:2.3:o:automationdirect:c-more_ea9-t7cl_firmware:*:*:*:*:*:*:*:* Versions before 6.53 Vulnerable ·AutomationDirect
- cpe:2.3:h:automationdirect:c-more_ea9-t7cl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
Show 12 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:automationdirect:c-more_ea9-t8cl_firmware:*:*:*:*:*:*:*:* | before 6.53 | Vulnerable | AutomationDirect |
| cpe:2.3:h:automationdirect:c-more_ea9-t8cl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AutomationDirect |
| cpe:2.3:o:automationdirect:c-more_ea9-t10cl_firmware:*:*:*:*:*:*:*:* | before 6.53 | Vulnerable | AutomationDirect |
| cpe:2.3:h:automationdirect:c-more_ea9-t10cl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AutomationDirect |
| cpe:2.3:o:automationdirect:c-more_ea9-t10wcl_firmware:*:*:*:*:*:*:*:* | before 6.53 | Vulnerable | AutomationDirect |
| cpe:2.3:h:automationdirect:c-more_ea9-t10wcl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AutomationDirect |
| cpe:2.3:o:automationdirect:c-more_ea9-t12cl_firmware:*:*:*:*:*:*:*:* | before 6.53 | Vulnerable | AutomationDirect |
| cpe:2.3:h:automationdirect:c-more_ea9-t12cl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AutomationDirect |
| cpe:2.3:o:automationdirect:c-more_ea9-t15cl-r_firmware:*:*:*:*:*:*:*:* | before 6.53 | Vulnerable | AutomationDirect |
| cpe:2.3:h:automationdirect:c-more_ea9-t15cl-r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AutomationDirect |
| cpe:2.3:o:automationdirect:c-more_ea9-t15cl_firmware:*:*:*:*:*:*:*:* | before 6.53 | Vulnerable | AutomationDirect |
| cpe:2.3:h:automationdirect:c-more_ea9-t15cl:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AutomationDirect |
- cpe:2.3:o:automationdirect:c-more_ea9-t8cl_firmware:*:*:*:*:*:*:*:* Versions before 6.53 Vulnerable ·AutomationDirect
- cpe:2.3:h:automationdirect:c-more_ea9-t8cl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
- cpe:2.3:o:automationdirect:c-more_ea9-t10cl_firmware:*:*:*:*:*:*:*:* Versions before 6.53 Vulnerable ·AutomationDirect
- cpe:2.3:h:automationdirect:c-more_ea9-t10cl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
- cpe:2.3:o:automationdirect:c-more_ea9-t10wcl_firmware:*:*:*:*:*:*:*:* Versions before 6.53 Vulnerable ·AutomationDirect
- cpe:2.3:h:automationdirect:c-more_ea9-t10wcl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
- cpe:2.3:o:automationdirect:c-more_ea9-t12cl_firmware:*:*:*:*:*:*:*:* Versions before 6.53 Vulnerable ·AutomationDirect
- cpe:2.3:h:automationdirect:c-more_ea9-t12cl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
- cpe:2.3:o:automationdirect:c-more_ea9-t15cl-r_firmware:*:*:*:*:*:*:*:* Versions before 6.53 Vulnerable ·AutomationDirect
- cpe:2.3:h:automationdirect:c-more_ea9-t15cl-r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
- cpe:2.3:o:automationdirect:c-more_ea9-t15cl_firmware:*:*:*:*:*:*:*:* Versions before 6.53 Vulnerable ·AutomationDirect
- cpe:2.3:h:automationdirect:c-more_ea9-t15cl:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AutomationDirect
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-6969
- 2026-10-03 Alias added: GHSA-vvr7-5892-5mm9
References
Sources
- CVE-2020-6969 · CVE Program
- CVE-2020-6969 · NVD
- FIRST EPSS
- GHSA-vvr7-5892-5mm9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences