CVE-2020-6969: Automationdirect C-More EA9-Rhi Firmware

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations.

Affected products

• Automationdirect C-More EA9-Rhi Firmware: before 6.53 (fixed in 6.53)
• Automationdirect C-More EA9-t10cl Firmware: before 6.53 (fixed in 6.53)
• Automationdirect C-More EA9-t10wcl Firmware: before 6.53 (fixed in 6.53)
• Automationdirect C-More EA9-t12cl Firmware: before 6.53 (fixed in 6.53)
• Automationdirect C-More EA9-t15cl-R Firmware: before 6.53 (fixed in 6.53)
• Automationdirect C-More EA9-t15cl Firmware: before 6.53 (fixed in 6.53)
• Automationdirect C-More EA9-t6cl-R Firmware: before 6.53 (fixed in 6.53)
• Automationdirect C-More EA9-t6cl Firmware: before 6.53 (fixed in 6.53)
• Automationdirect C-More EA9-t7cl-R Firmware: before 6.53 (fixed in 6.53)
• Automationdirect C-More EA9-t7cl Firmware: before 6.53 (fixed in 6.53)
• Automationdirect C-More EA9-t8cl Firmware: before 6.53 (fixed in 6.53)

Published 2020-02-05. Last modified 2026-06-17.