10
CVSSv2

CVE-2021-41299

Published: 30/09/2021 Updated: 07/10/2021
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote attackers can obtain administrator’s privilege without logging in.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ecoa ecs_router_controller-ecs_firmware -

ecoa riskbuster_firmware -

ecoa riskterminator -