CVE-2021-41290

2021-09-3011:15:07

CWE-434

CWE-22

[email protected]

web.nvd.nist.gov

cve-2021-41290

ecoa

bas controller

file write

path traversal

vulnerability

post parameters

unauthenticated attackers

remote code execution

10 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.7%

JSON

CPENameOperatorVersion
ecoa:ecs_router_controller\-ecs_firmwareecoa ecs router controller-ecs firmwareeq-
ecoa:riskbuster_firmwareecoa riskbuster firmwareeq-
ecoa:riskterminatorecoa riskterminatoreq-

CPE	Name	Operator	Version
ecoa:ecs_router_controller\-ecs_firmware	ecoa ecs router controller-ecs firmware	eq	-
ecoa:riskbuster_firmware	ecoa riskbuster firmware	eq	-
ecoa:riskterminator	ecoa riskterminator	eq	-

References

www.twcert.org.tw/tw/cp-132-5126-ca315-1.html