ecs router controller-ecs firmware vulnerabilities and fixes

Recent CVEs affecting ecs router controller-ecs firmware, with upgrade or downgrade steps. 13 tracked.

Also searched as: ecs router controller ecs firmware, ecsroutercontroller-ecsfirmware.

ecs router controller-ecs firmware has 13 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-09-30. Highest priority: CVE-2021-41299 (score 65/100).

• CVE-2021-41302 HIGH 7.3 MITIGATE MITIGATE ECOA BAS controller stores sensitive data (backup exports) in clear-text, thus the unauthenticated attacker ca
• CVE-2021-41301 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the spec
• CVE-2021-41300 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated att
• CVE-2021-41299 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote a
• CVE-2021-41298 HIGH 8.8 MITIGATE MITIGATE ECOA BAS controller is vulnerable to insecure direct object references that occur when the application provide
• CVE-2021-41297 HIGH 8.8 MITIGATE MITIGATE ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely esc
• CVE-2021-41296 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote p
• CVE-2021-41295 HIGH 8.8 MITIGATE MITIGATE ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely p
• CVE-2021-41294 CRITICAL 9.1 MITIGATE MITIGATE ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion
• CVE-2021-41293 HIGH 7.5 MITIGATE MITIGATE ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure
• CVE-2021-41292 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller suffers from an authentication bypass vulnerability
• CVE-2021-41291 HIGH 7.5 MITIGATE MITIGATE ECOA BAS controller suffers from a path traversal content disclosure vulnerability
• CVE-2021-41290 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability

FAQ

How do I fix ecs router controller-ecs firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ecs router controller-ecs firmware being exploited right now?

None of the tracked ecs router controller-ecs firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ecs router controller-ecs firmware CVE should I patch first?

CVE-2021-41299 currently ranks highest (65/100): ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote a.

RSS feed for ecs router controller-ecs firmware · ← Back to latest CVEs