Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-83634
HistoryOct 18, 2021 - 12:00 a.m.

ECOA BAS controller path traversal vulnerability

2021-10-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
ecoa technologies corp
china
building automation controller
path traversal
vulnerability
compromise
file manager
directory content
attackers
cnvd

EPSS

0.024

Percentile

90.0%

Ecoa Bas controller is a building automation controller from Ecoa Technologies Corp. in China. A path traversal vulnerability exists in Ecoa Bas controller, which can be exploited by attackers to compromise the device directory content by using the GET parameter in the file manager.

EPSS

0.024

Percentile

90.0%