← Database

CVE-2021-41300

CRITICAL CVSS: 9.8 Published: 2021-09-30 Modified: 2026-06-17

Description

ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can access the page and obtain privilege with full functionality.

Affected Platforms

Ecoa Ecs Router Controller-EcsEcoa RiskbusterEcoa Riskbuster FirmwareEcoa Ecs Router Controller-Ecs FirmwareEcoa Riskterminator

Weakness Type

CWE-522, CWE-522

References