PatchTheCVEecoa vulnerabilities
Recent CVEs affecting ecoa products. 13 tracked.
ecoa has 13 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-09-30. Highest priority: CVE-2021-41299 (score 65/100).
- CVE-2021-41302 HIGH 7.3 MITIGATE MITIGATE ECOA BAS controller stores sensitive data (backup exports) in clear-text, thus the unauthenticated attacker ca
- CVE-2021-41301 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the spec
- CVE-2021-41300 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated att
- CVE-2021-41299 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote a
- CVE-2021-41298 HIGH 8.8 MITIGATE MITIGATE ECOA BAS controller is vulnerable to insecure direct object references that occur when the application provide
- CVE-2021-41297 HIGH 8.8 MITIGATE MITIGATE ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely esc
- CVE-2021-41296 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote p
- CVE-2021-41295 HIGH 8.8 MITIGATE MITIGATE ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely p
- CVE-2021-41294 CRITICAL 9.1 MITIGATE MITIGATE ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion
- CVE-2021-41293 HIGH 7.5 MITIGATE MITIGATE ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure
- CVE-2021-41292 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller suffers from an authentication bypass vulnerability
- CVE-2021-41291 HIGH 7.5 MITIGATE MITIGATE ECOA BAS controller suffers from a path traversal content disclosure vulnerability
- CVE-2021-41290 CRITICAL 9.8 MITIGATE MITIGATE ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability
FAQ
How do I fix ecoa vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ecoa being exploited right now?
None of the tracked ecoa CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ecoa CVE should I patch first?
CVE-2021-41299 currently ranks highest (65/100): ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote a.