PRODUCT PROFILE

ecs_router_controller-ecs_firmware

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

高危CVE-2021-412932021/10/01

ECOA Building Automation System - Arbitrary File Retrieval

The ECOA BAS controller suffers from an arbitrary file disclosure vulnerability. Using the 'fname' POST parameter in viewlog.jsp, attackers can disclose arbitrary files on the affected device and disclose sensitive and system information.

ecs_router_controller-ecs_firmwarePoC 已收录

CVSS7.5EPSS 88.5%

高危CVE-2021-412912021/10/01

ECOA Building Automation System - Directory Traversal Content Disclosure

The ECOA BAS controller suffers from a directory traversal content disclosure vulnerability. Using the GET parameter cpath in File Manager (fmangersub), attackers can disclose directory content on the affected device

ecs_router_controller-ecs_firmwarePoC 已收录

CVSS7.5EPSS 88.4%