PT-2020-19317 · C More · C-More Touch Panels Ea9 Series

Joel Langill · Published 2020-02-05 · Updated 2020-02-14 · CVE-2020-6969

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions C-More Touch Panels EA9 series: versions prior to 6.53

Description The issue allows an attacker to unmask credentials and other sensitive information on unprotected project files, potentially enabling remote access and manipulation of system configurations.

Recommendations For versions prior to 6.53, update to version 6.53 or later to resolve the issue.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2020-6969

Affected Products

C-More Touch Panels Ea9 Series

References · 3

• https://us-cert.gov/ics/advisories/icsa-20-035-01 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-6969 · Security Note
• https://osv.dev/vulnerability/CVE-2020-6969 · Vendor Advisory