high8.8
CVE-2021-41297
ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of adm…
Impact
ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ecoa | Ecs Router Controller-Ecs Firmware | All versions |
| Ecoa | Riskbuster Firmware | All versions |
| Ecoa | Riskterminator | All versions |