High severity7.5NVD Advisory· Published Sep 30, 2021· Updated Jun 17, 2026
CVE-2021-41291
CVE-2021-41291
Description
ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unauthenticated attackers can remotely disclose directory content on the affected device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Range: next of 0
- cpe:2.3:o:ecoa:ecs_router_controller-ecs_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:ecoa:riskbuster_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:a:ecoa:riskterminator:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.twcert.org.tw/tw/cp-132-5127-3cbd3-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.