← CVE Intelligence

CVE-2021-41290

ECOA BAS controller - Path Traversal-1 PUBLISHED

Description (CNA)

ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the affected device.

Affected (CNA)

Vendor / productVersions
ECOA / ECS Router Controller ECS (FLASH)unknown next of 0 before unspecified
ECOA / RiskBuster Terminator E6L45unknown next of 0 before unspecified
ECOA / RiskBuster System RB 3.0.0unknown next of 0 before unspecified
ECOA / RiskBuster System TRANE 1.0unknown next of 0 before unspecified
ECOA / Graphic Control Softwareunknown next of 0 before unspecified
ECOA / SmartHome II E9246unknown next of 0 before unspecified
ECOA / RiskTerminatorunknown next of 0 before unspecified

CWE

CWE-434

References

ADP enrichment

CVE

No English description supplied.