← Database

CVE-2021-41299

CRITICAL CVSS: 9.8 Published: 2021-09-30 Modified: 2026-06-17

Description

ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote attackers can obtain administrator’s privilege without logging in.

Affected Platforms

Ecoa Ecs Router Controller-EcsEcoa RiskbusterEcoa Riskbuster FirmwareEcoa Ecs Router Controller-Ecs FirmwareEcoa Riskterminator

Weakness Type

CWE-798

References