High severity8.8NVD Advisory· Published Sep 30, 2021· Updated Jun 17, 2026
CVE-2021-41297
CVE-2021-41297
Description
ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Range: next of 0
- cpe:2.3:o:ecoa:ecs_router_controller-ecs_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:ecoa:riskbuster_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:a:ecoa:riskterminator:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.twcert.org.tw/tw/cp-132-5133-f3c4b-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.