High severity7.3NVD Advisory· Published Sep 30, 2021· Updated Jun 17, 2026
CVE-2021-41302
CVE-2021-41302
Description
ECOA BAS controller stores sensitive data (backup exports) in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Range: next of 0
- cpe:2.3:o:ecoa:ecs_router_controller-ecs_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:ecoa:riskbuster_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:a:ecoa:riskterminator:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.twcert.org.tw/tw/cp-132-5138-d40ae-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.