← Database

CVE-2021-41302

HIGH CVSS: 7.3 Published: 2021-09-30 Modified: 2026-06-17

Description

ECOA BAS controller stores sensitive data (backup exports) in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege.

Affected Platforms

Ecoa Ecs Router Controller-EcsEcoa RiskbusterEcoa Riskbuster FirmwareEcoa Ecs Router Controller-Ecs FirmwareEcoa Riskterminator

Weakness Type

CWE-311, CWE-312

References