Beveiligingsadvies
CVE-2021-41294
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion. Using the specific GET parameter, unauthenticated attackers can remotely delete arbitrary files on the affected device and cause denial of service scenario.