CVE-2020-6969 - It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations

Back Back to CVE browser

CRITICAL

It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations

Published Feb 5, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.37%

Description

It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.

Affected products

Vendor n/a Product C-More Touch Panels EA9 series Default
n/a
- Version
  firmware versions prior to 6.53
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

C-More Touch Panels EA9 series

n/a

Version	Status	Constraints
firmware versions prior to 6.53	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28109
Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-035-01
x_refsource_MISCPatchThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28109		Advisory
https://www.us-cert.gov/ics/advisories/icsa-20-035-01		x_refsource_MISCPatchThird Party AdvisoryUS Government Resource