← CVE Intelligence

CVE-2021-41295

ECOA BAS controller - Cross-Site Request Forgery (CSRF) PUBLISHED

Description (CNA)

ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a forged request at a malicious web page and execute CRUD commands (GET, POST, PUT, DELETE) to perform arbitrary operations in the system.

Affected (CNA)

Vendor / productVersions
ECOA / ECS Router Controller ECS (FLASH)unknown next of 0 before unspecified
ECOA / RiskBuster Terminator E6L45unknown next of 0 before unspecified
ECOA / RiskBuster System RB 3.0.0unknown next of 0 before unspecified
ECOA / RiskBuster System TRANE 1.0unknown next of 0 before unspecified
ECOA / Graphic Control Softwareunknown next of 0 before unspecified
ECOA / SmartHome II E9246unknown next of 0 before unspecified
ECOA / RiskTerminatorunknown next of 0 before unspecified

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.