Remote Access Vulnerability in C-More Touch Panels by Automation Direct
CVE-2020-6969

9.8CRITICAL

Key Information:

Vendor

Automationdirect

Status
C-more Touch Panels Ea9 Series
Vendor
CVE Published:
5 February 2020

What is CVE-2020-6969?

A vulnerability exists in the EA9 series of C-More Touch Panels by Automation Direct, whereby unprotected project files can expose sensitive credentials and other critical data. This flaw allows attackers to gain remote access to the panels, enabling them to manipulate system configurations and potentially compromise the integrity of industrial control systems. Users are advised to secure their project files to prevent unauthorized access.

Affected Version(s)

C-More Touch Panels EA9 series firmware versions prior to 6.53

References

https://www.us-cert.gov/ics/advisories/icsa-20-035-01
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2020-6969 : Remote Access Vulnerability in C-More Touch Panels by Automation Direct