CVE-2021-41294 – ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files d …

Vuln ID: CVE-2021-41294

Published:  2021-09-30  11:15:07Z

Description: ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion. Using the specific GET parameter, unauthenticated attackers can remotely delete arbitrary files on the affected device and cause denial of service scenario.

Source: NVD.NIST.GOV