ECOA BAS controller stores sensitive data (backup exports) in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
ecoa ecs_router_controller-ecs_firmware - |
||
ecoa riskbuster_firmware - |
||
ecoa riskterminator - |