VYPR
Unrated severityNVD Advisory· Published Sep 30, 2021· Updated Sep 16, 2024

ECOA BAS controller - Path Traversal-1

CVE-2021-41291

Description

ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unauthenticated attackers can remotely disclose directory content on the affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.