Security Advisory
CVE-2021-41299
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote attackers can obtain administrator’s privilege without logging in.