← CVE Intelligence

CVE-2021-41293

ECOA BAS controller - Path Traversal-3 PUBLISHED

Description (CNA)

ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure. Using the specific POST parameter, unauthenticated attackers can remotely disclose arbitrary files on the affected device and disclose sensitive and system information.

Affected (CNA)

Vendor / productVersions
ECOA / ECS Router Controller ECS (FLASH)unknown next of 0 before unspecified
ECOA / RiskBuster Terminator E6L45unknown next of 0 before unspecified
ECOA / RiskBuster System RB 3.0.0unknown next of 0 before unspecified
ECOA / RiskBuster System TRANE 1.0unknown next of 0 before unspecified
ECOA / Graphic Control Softwareunknown next of 0 before unspecified
ECOA / SmartHome II E9246unknown next of 0 before unspecified
ECOA / RiskTerminatorunknown next of 0 before unspecified

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.