Ecs Router Controller Ecs Firmware CVE-2021-41294

ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure. Rated high severity

ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Rated high severity (CVSS 7.5), this

ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files

ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can

ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote attackers c

ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote password at

ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Rated critical severity (CVSS

ECOA BAS controller suffers from an authentication bypass vulnerability. Rated critical severity (CVSS 9.1), this vulner

ECOA BAS controller is vulnerable to insecure direct object references that occur when the application provides direct a

ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate priv

ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a for

ECOA BAS controller stores sensitive data (backup exports) in clear-text, thus the unauthenticated attacker can remotely