← CVE Intelligence

CVE-2021-41294

ECOA BAS controller - Path Traversal-4 PUBLISHED

Description (CNA)

ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion. Using the specific GET parameter, unauthenticated attackers can remotely delete arbitrary files on the affected device and cause denial of service scenario.

Affected (CNA)

Vendor / productVersions
ECOA / ECS Router Controller ECS (FLASH)unknown next of 0 before unspecified
ECOA / RiskBuster Terminator E6L45unknown next of 0 before unspecified
ECOA / RiskBuster System RB 3.0.0unknown next of 0 before unspecified
ECOA / RiskBuster System TRANE 1.0unknown next of 0 before unspecified
ECOA / Graphic Control Softwareunknown next of 0 before unspecified
ECOA / SmartHome II E9246unknown next of 0 before unspecified
ECOA / RiskTerminatorunknown next of 0 before unspecified

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.