CVE-2021-41291 - ECOA BAS controller - Path Traversal-1

Back Back to CVE browser

HIGH

ECOA BAS controller - Path Traversal-1

Published Sep 30, 2021

7.5

HIGH

CVSS 3.1

EPSS 82.69%

Description

ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unauthenticated attackers can remotely disclose directory content on the affected device.

Affected products

Remediation

Vendor solution

Contact tech support from ECOA.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-28321
Advisory
https://www.twcert.org.tw/tw/cp-132-5127-3cbd3-1.html
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-28321		Advisory
https://www.twcert.org.tw/tw/cp-132-5127-3cbd3-1.html		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner twcert

Published Sep 30, 2021

Updated Sep 16, 2024

Reserved Sep 15, 2021

Link CVE-2021-41291

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2021-41291

Red Hat

No data

ENISA EUVD

Assigner twcert

Published Sep 30, 2021

Updated Sep 16, 2024

Link EUVD-2021-28321

GitHub

No data