CVE-2021-41290

 

Published at: - 30-09-2021 01:15

Last modified: - 21-10-2022 07:46

Total changes: - 3

Description

ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the affected device.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://www.twcert.org.tw/tw/cp-132-5126-ca315-1.html

 

Keywords

NVD

 

CVE-2021-41290

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures