CVE-2021-41297

Publication date

2021-09-30 10:41:00

Family

twcert

State

PUBLISHED

Description

ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text.