CVE-2021-41301 — ECOA BAS controller - Exposure of Sensitive Information to an Unauthorized Actor
ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files using an HTTP GET request. This will enable the unauthen…
Published: 2021-09-30 · CVSS: 9.8 · CVSS 3.1
ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files using an HTTP GET request. This will enable the unauthenticated attacker to remotely disclose sensitive information and help her in authentication bypass, privilege escalation and full system access.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7