critical9.8
CVE-2021-41300
ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can access the page and obtain privilege w…
Impact
ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can access the page and obtain privilege with full functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ecoa | Ecs Router Controller-Ecs Firmware | All versions |
| Ecoa | Riskbuster Firmware | All versions |
| Ecoa | Riskterminator | All versions |